Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: UfoRdqeaWmlIZTfs85zSNdr407GJGphd606wp0lDMfM=
Subject key identifier: 27:1B:C5:5B:9F:8D:8B:4D:7D:44:92:15:C2:10:82:7C:74:E6:63:1E
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 0199FE4722591E61DD17540ED9FE156A4EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: DA
Signing time: Sun 19 Oct 2025 21:01:38 +0000
Manifest this update: Sun 19 Oct 2025 21:01:38 +0000
Manifest next update: Mon 20 Oct 2025 21:01:38 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: T9t8CqdNfj2IDwaN4Jprifombf5Slf8Ulyo5uMawArI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:22:59:1e:61:dd:17:54:0e:d9:fe:15:6a:4e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Oct 19 21:01:38 2025 GMT
Not After : Oct 20 21:01:38 2025 GMT
Subject: CN=271bc55b9f8d8b4d7d449215c210827c74e6631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:aa:2c:c0:87:87:fe:f7:b2:8e:93:16:bd:
83:d7:0d:2d:0e:e8:dc:70:9e:75:18:2c:2b:bb:d4:
f5:08:db:b1:fd:8d:1a:35:3a:32:e8:08:3f:d1:1a:
c9:8a:89:5e:ad:29:79:a0:69:c0:90:ac:ff:f2:dc:
07:59:89:ff:9d:1e:ea:c7:6e:f4:dd:9b:4f:ee:8f:
14:83:16:66:1b:a9:e2:6b:ee:65:0f:03:1b:09:fe:
1a:bb:63:00:5c:50:05:5f:4e:71:1f:fd:93:ef:95:
39:14:25:2a:13:cc:74:9a:b1:35:7b:8c:63:9b:6e:
1a:f6:4d:3a:8a:51:91:0d:58:65:b1:95:6c:37:07:
3f:b1:b8:88:96:a7:03:43:4a:d9:f9:7d:d1:db:68:
bd:10:9c:a5:7a:19:2e:2e:63:c3:9c:7b:ed:42:37:
60:c6:26:8d:42:8d:15:1c:d3:15:51:2c:32:01:fd:
08:67:52:22:87:e7:29:9f:2f:fa:12:8d:14:92:78:
fa:18:20:5b:0b:26:7b:9e:02:eb:4a:4a:3a:54:ce:
69:b8:e5:34:8a:7f:83:f6:66:b0:2e:e8:8e:d4:75:
bd:37:71:e8:2a:df:c0:dd:d8:6e:d3:7d:c9:a0:c1:
9f:b8:4e:e8:fb:00:38:22:8f:59:39:eb:da:07:13:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:C5:5B:9F:8D:8B:4D:7D:44:92:15:C2:10:82:7C:74:E6:63:1E
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:bc:58:ed:fb:1d:4c:64:d5:ab:7f:1d:3e:3e:2d:aa:0b:
b7:9b:a1:db:8c:1b:05:42:47:12:d0:53:ae:3e:a5:50:a0:3a:
94:36:20:e4:99:b6:b4:a1:f7:c6:02:5f:3f:41:c9:77:7f:e3:
71:db:63:8e:73:89:ce:cc:a2:89:ee:b8:08:05:85:fb:6b:89:
62:cc:1b:a1:d9:9f:ee:78:0a:89:9f:7b:35:a8:51:92:fe:57:
1b:8f:71:21:6c:18:0e:51:55:b1:38:c0:1f:01:6c:20:a3:39:
f9:04:20:68:6e:aa:1f:28:cb:44:8a:f5:4f:24:db:10:24:87:
87:fa:1c:b0:35:50:91:03:de:cf:80:32:c2:8f:8a:d0:55:47:
e0:ec:9a:74:88:61:2f:a2:6b:11:69:60:fe:f3:e9:49:47:51:
23:88:82:3a:39:62:e9:54:9d:d8:17:40:56:2e:5e:02:a2:fc:
80:3e:50:0d:44:1c:40:f4:10:b8:d1:05:25:1a:e5:40:b5:e6:
8b:ba:02:e2:42:db:98:b4:f7:33:94:b7:44:08:d3:c1:51:31:
d8:c3:5c:13:96:62:d1:21:1b:03:3c:71:44:9a:cf:7e:95:22:
79:ea:3d:37:a4:67:47:5a:f7:26:3c:f7:c3:34:58:cc:2e:e2:
49:95:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:14 2025 by rpki-client