Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: 5rpmnudCKbP9eo/KOKLQS/0A5c4nFX+NuS+y/9hfZKk=
Subject key identifier: 4C:96:5B:2F:84:C8:FA:E6:4E:D5:A4:A2:F1:56:4B:ED:B2:7F:E1:B8
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0199FD33FF0B79E6D7DDA9ED3E5F34DCFB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 06CF
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: ZYlOEYRQufrq2uZg+nJLsnURjm9+7mMnIqom64qJcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ff:0b:79:e6:d7:dd:a9:ed:3e:5f:34:dc:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=4c965b2f84c8fae64ed5a4a2f1564bedb27fe1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:86:d7:73:45:17:76:7b:90:47:b4:9b:9c:
94:c0:03:f2:ea:ad:b0:80:b6:98:18:b7:a4:5e:44:
14:be:9e:56:32:c5:3d:2d:d2:10:c9:fa:68:e4:dc:
41:4e:36:28:56:02:c5:e9:3c:f4:27:f8:0b:f0:5a:
0d:02:4c:0c:01:f3:8f:8f:0c:35:09:33:1e:96:ab:
e7:d8:13:71:8f:75:f2:f1:35:d8:bf:73:80:bb:77:
a7:20:17:15:9a:55:64:e6:10:b1:73:c9:0c:f9:fd:
ee:ee:c1:63:54:32:90:96:29:6b:f2:d2:04:42:a5:
5c:46:2f:fc:20:cf:21:e8:8c:cf:f3:19:bd:86:f8:
21:60:39:30:d5:b4:db:f1:3a:94:c4:83:9c:32:77:
bb:49:c2:4b:ac:d0:ad:f2:6c:5a:15:98:1a:09:7f:
a6:94:9c:17:4a:0d:8f:b6:37:6d:20:8c:8b:83:bc:
1b:07:22:1c:3b:79:d6:08:b7:6d:74:c7:5f:88:47:
5b:db:9e:f0:0f:ba:96:1a:b8:a1:d3:6a:80:ee:47:
85:17:ca:16:88:28:53:5a:d1:a0:82:7e:34:eb:de:
15:96:74:82:a8:59:53:a6:ef:ee:fc:18:f9:d9:d1:
1b:07:12:08:60:0e:d4:78:32:35:e3:4a:1d:c0:d2:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:5B:2F:84:C8:FA:E6:4E:D5:A4:A2:F1:56:4B:ED:B2:7F:E1:B8
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:ee:48:3c:d0:8e:88:d2:d9:ef:34:07:d2:fb:74:71:d4:
7c:96:1c:e0:06:dd:89:5c:a8:47:25:8a:bd:03:a7:3c:c8:58:
5f:49:4c:83:ac:5e:4f:39:f6:44:ca:a8:19:fc:a6:72:57:20:
60:7e:8f:43:4d:f2:95:b7:18:c5:70:07:c0:c8:7c:9b:d9:69:
9c:5a:24:36:9d:39:d3:64:82:1e:92:4c:da:20:b7:f1:89:28:
01:77:5c:0b:d8:a1:3f:91:dc:a5:a2:38:96:12:72:3a:a7:1f:
bf:f6:89:13:e7:c2:3d:4d:93:5b:e4:66:aa:cf:9d:55:80:80:
fc:5a:aa:71:16:2c:50:50:b5:53:ca:c0:40:80:ea:b2:79:9b:
e1:63:8f:15:95:bd:f4:16:b3:41:da:9c:0d:31:ec:7e:2b:12:
6c:9d:fd:2f:7c:bc:e1:02:c3:af:16:96:b4:88:c7:5b:d3:76:
61:33:10:f7:80:db:d2:ac:ef:48:1a:bd:2f:c5:4a:e6:16:83:
94:80:68:81:60:87:f7:03:05:83:5a:2c:19:b4:d7:36:0d:46:
b1:16:ce:dd:f2:e3:30:aa:93:70:9f:6b:c6:5a:74:ad:f2:cd:
51:b7:6c:01:de:91:9c:49:53:56:de:01:c1:bc:64:48:3a:1b:
90:9b:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:14 2025 by rpki-client