Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: yuh759Lp6Xt8QdZ2u8fZtzlYsoz8zXvIU7E9GoIE4Ag=
Subject key identifier: 39:0E:BE:E9:5A:E2:37:AF:E7:46:C5:E9:90:45:1C:62:60:44:0E:C9
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0199FB7CE683D49299659CB5ED1D52FCCA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=)
2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: tUm+7VcFyJe3YZuolxRKI2AXxfN4Qx1lnh1XCF65I4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e6:83:d4:92:99:65:9c:b5:ed:1d:52:fc:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=390ebee95ae237afe746c5e990451c6260440ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:3e:6a:72:07:25:49:12:b2:b7:9d:a8:79:
f0:14:a3:8e:13:12:61:87:64:86:10:44:b8:a2:b6:
87:63:0b:a5:b3:f8:86:12:0f:b2:a0:2d:91:e7:df:
89:4b:50:7b:b4:46:1e:d3:e7:12:54:eb:70:a3:23:
95:20:71:ed:9b:06:93:18:b4:8e:ec:8a:35:8a:db:
53:88:81:5d:16:8f:be:09:cb:b5:bb:73:30:68:37:
c5:71:e6:d7:68:bf:1f:29:77:0d:e3:f4:5a:73:05:
26:98:a7:22:0b:68:a6:3c:16:5b:bb:d9:ee:40:2f:
59:b7:8e:1d:8d:d9:e1:44:d2:91:a3:ba:20:64:d3:
05:38:cd:5a:dc:72:06:ba:ab:01:e4:c0:71:77:c9:
d0:41:a8:43:4c:ce:a1:ad:7d:9b:47:47:3d:31:59:
6c:f5:a6:bf:e2:94:66:4d:51:9f:42:ae:84:9b:2e:
a1:d9:ed:77:55:5d:04:85:5a:14:27:74:0e:ec:08:
13:e5:d7:56:30:ae:14:5a:be:81:fb:78:f1:c3:78:
9c:79:40:f5:10:1f:e1:4d:2e:dc:65:22:4c:46:ca:
74:f8:0e:b2:cf:b1:78:e2:83:b9:61:64:36:f1:57:
53:5f:bf:e3:4a:6b:fd:d0:5b:a3:ae:fb:75:ee:fa:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:BE:E9:5A:E2:37:AF:E7:46:C5:E9:90:45:1C:62:60:44:0E:C9
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:99:4b:1b:f3:56:67:ca:23:30:ec:56:2d:12:e8:0e:7c:c8:
1a:4e:87:c8:d4:b0:53:84:0a:c3:73:df:a0:a3:62:39:39:00:
b9:cf:4d:16:f8:e5:4e:f2:d5:a6:3a:72:55:9f:3d:1b:3a:d6:
2f:e6:1b:6c:fd:ab:7c:8b:4e:12:36:1b:94:24:42:37:56:76:
99:7b:b7:55:4b:ca:3b:ab:a5:d9:8b:49:e0:ef:9e:3b:4d:08:
40:ae:87:cf:e4:e6:0c:46:0e:d1:ce:4a:ff:f7:6e:d1:89:95:
b0:13:71:b3:99:ed:67:c7:46:06:d2:e4:6c:01:1c:b3:c6:c5:
a0:f5:54:9f:8f:99:86:0e:41:76:70:c8:9e:76:fd:ab:24:75:
ea:42:c0:25:a6:1c:34:9a:75:87:c7:35:35:c2:67:b7:84:e6:
ba:73:2a:67:c0:a9:77:ad:3a:0f:16:dc:87:93:ab:ba:1d:1c:
37:a3:24:13:59:28:4e:a1:63:7e:c2:43:5f:67:a4:32:cd:f1:
5a:83:b4:25:29:f3:1c:4b:f0:d2:82:bb:7d:b1:67:de:5c:f6:
0d:72:ab:0e:8a:25:9f:7a:16:95:03:66:f4:e6:c8:32:75:2a:
e8:46:93:2e:ca:65:16:86:cc:a9:85:61:a2:12:5c:8d:85:6d:
48:02:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:10 2025 by rpki-client