Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: v5Qx6DAc2+U97UOlvqHOKA/fu3+cW+le7/XSxhUxm+c=
Subject key identifier: 70:40:DE:BB:40:54:01:93:24:98:19:2E:1E:00:DC:58:7B:04:DF:05
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 0199FC216144D93C2C8B1D7C0984747E392F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 04F6
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (hash: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: c9usgm1Mj6POjuM8F0QmtA8sdZVwQ43/9rfoBhA8MhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:61:44:d9:3c:2c:8b:1d:7c:09:84:74:7e:39:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=7040debb405401932498192e1e00dc587b04df05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:83:a9:f1:32:bd:e0:60:28:97:bc:fa:15:
de:e0:5c:0c:28:e6:b9:84:55:dc:b3:3c:f7:79:11:
41:43:75:3c:27:85:79:7f:36:69:08:9e:dc:9d:d3:
a5:69:ea:08:8c:b4:2c:c3:45:90:b6:5e:ac:59:09:
fc:f2:1f:d8:ff:88:17:79:79:c2:65:f6:5f:14:35:
e3:5f:be:01:54:8e:1e:37:60:42:af:cf:bf:e8:03:
3a:50:70:37:8f:32:64:49:f3:f9:be:e9:ce:dd:7c:
8e:98:33:cd:b0:51:8a:9a:72:6d:57:8f:c0:e7:9c:
c6:55:61:2d:18:0e:93:f9:6a:37:10:88:f1:b0:b3:
6b:19:8c:e1:ed:0d:5b:80:2c:22:4c:79:77:0a:c3:
ba:56:e7:c3:cc:5f:89:39:c1:cc:40:af:34:7b:5b:
52:6e:ee:5d:27:e5:5f:be:60:11:c4:5d:20:e2:8d:
ae:4f:78:d7:d3:2c:99:41:8f:e8:72:e6:f6:16:09:
56:7f:69:cd:ce:77:d5:42:d3:4a:d0:87:b4:f6:9e:
e4:18:f8:84:fa:68:47:f3:d2:5c:b6:78:de:fc:cd:
74:8c:cb:cc:78:48:11:33:bc:7a:c3:3e:a8:3b:6b:
e9:3e:da:d9:8e:84:ed:88:0f:0b:36:53:8d:c8:76:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:DE:BB:40:54:01:93:24:98:19:2E:1E:00:DC:58:7B:04:DF:05
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:61:c6:e3:97:a8:7d:f5:0c:27:76:96:b0:f4:aa:8a:0d:
22:11:04:82:98:71:d4:8b:25:20:86:dd:b7:9f:35:aa:04:19:
05:55:f4:8a:2a:b9:54:54:57:b9:19:65:4b:3b:ff:42:07:11:
95:ba:69:ce:79:1b:e2:b4:09:dc:14:f7:56:71:37:9d:10:1f:
52:a7:0d:02:09:c9:c4:50:a7:f4:be:da:f9:11:29:72:34:af:
a9:a2:4d:8d:db:38:69:c2:6a:cf:e7:b8:98:f6:b0:8c:b2:bb:
4f:d5:54:12:46:59:96:23:89:68:30:b1:0b:ed:c6:f2:dd:8e:
fa:62:bf:31:ea:92:9a:62:8e:06:81:c3:6c:ee:ec:a5:5e:3b:
35:00:b3:ec:e7:ed:e6:2d:90:6f:87:32:45:8f:b3:ce:c8:44:
3a:83:c7:c1:46:41:99:11:37:1b:c0:5c:ff:41:5a:ac:58:b2:
ce:79:2b:06:aa:c1:0f:f0:81:46:6e:2a:4a:5b:aa:ea:88:c3:
2d:f3:44:48:5f:93:d4:3d:0d:d5:8f:6f:0b:87:4f:35:f4:14:
7f:0e:a8:6f:64:02:35:ba:0c:d3:81:62:a8:d1:e2:36:fd:d3:
5a:5f:86:85:cd:25:21:52:fa:e4:19:75:ba:2c:9a:da:0b:65:
0a:39:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:49 2025 by rpki-client