Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: oSZqiIt/LkYzmIN6FNSt51FiNZGLUvUbLte8xW9nKtQ=
Subject key identifier: 2C:4B:BE:62:ED:94:C9:B5:0D:BB:F2:72:FC:FE:3E:B4:DA:5C:FE:66
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0199FB7C866102549C934B8D9D7AF287B3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1600
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: sCyDa8s5eM9VBlLasAeKhsVJDPMj/X4BBA/j7grkFoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:61:02:54:9c:93:4b:8d:9d:7a:f2:87:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=2c4bbe62ed94c9b50dbbf272fcfe3eb4da5cfe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:c8:dc:57:38:2e:d3:51:26:82:9d:e6:a6:
a5:5b:05:31:15:6f:c6:28:b4:3b:14:72:89:da:bc:
7c:0e:1c:b0:5b:1a:62:db:e2:ee:c7:ec:7d:72:16:
6c:7d:a6:18:0f:55:bb:3a:79:83:c1:7d:d6:b9:63:
ef:0e:b8:3c:57:bd:1e:ae:73:34:58:02:87:9a:de:
3c:e1:a3:3b:15:04:3f:0a:9f:72:9f:76:9e:10:bc:
7c:f9:84:7f:20:a5:18:21:d7:6a:06:50:79:c4:a2:
98:a6:8f:eb:ea:c5:1f:9c:bf:c6:c4:46:65:3c:8c:
f4:d7:04:15:b8:63:d9:da:39:72:91:a7:cd:b2:55:
68:b2:8e:bb:04:67:47:27:4f:2f:a8:92:2c:c7:a9:
15:e5:6c:4d:af:c1:13:0d:4c:f7:9b:df:ac:50:23:
03:63:f0:07:ce:86:c6:ca:62:96:a0:17:81:dd:9c:
89:cd:26:a9:2d:dd:bb:c0:b2:96:9b:ba:b9:6f:af:
9d:ab:ed:c6:6c:60:ec:5d:7f:85:ec:13:19:f5:7f:
8c:6c:44:2d:01:67:1b:d7:18:76:5d:95:84:e1:18:
69:56:fa:72:d8:58:15:c5:b1:af:5f:c6:16:17:ff:
f0:db:fa:42:32:12:9d:70:04:fb:ed:a8:09:0b:b6:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:BE:62:ED:94:C9:B5:0D:BB:F2:72:FC:FE:3E:B4:DA:5C:FE:66
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:81:e0:af:06:55:53:28:16:fc:e0:d9:2d:5c:d7:f0:61:19:
72:89:a0:9e:1e:8e:83:fc:24:23:eb:98:33:03:a3:7a:d3:10:
75:5c:13:70:37:1c:07:c8:5e:05:77:98:ff:ca:bc:23:1f:b4:
ca:22:80:4f:1b:1d:00:df:82:b9:e7:6f:9b:91:45:a3:13:a8:
7a:ff:01:a6:00:6f:3b:a7:2c:86:7a:78:78:51:63:85:be:44:
74:3a:e6:80:e1:7f:93:61:2c:6b:8c:db:e7:51:ca:8a:65:33:
ea:a6:3c:e8:56:67:43:fe:68:39:9d:60:33:4c:e0:1e:05:62:
18:66:ea:6f:19:a0:ae:a1:c5:db:c6:c1:ce:ec:c0:8e:af:42:
74:f3:f4:dc:7f:29:d7:43:3e:ee:d1:0e:c2:01:d1:db:c9:ab:
f3:7d:10:7a:97:ed:db:ce:8b:9a:18:7f:5a:e9:ef:d1:14:94:
d8:ee:ac:fe:f7:c5:3e:ab:4c:74:a8:8b:32:8b:58:f5:b1:8b:
e3:6f:00:10:dd:88:10:8e:0a:79:41:f4:30:1e:82:ce:a2:17:
25:b0:e9:d6:03:ff:8f:24:ec:55:ba:44:0e:c0:7d:ca:13:ff:
15:5e:46:3e:18:b2:07:7d:8f:04:6d:4f:d4:66:5f:79:8e:08:
1a:4f:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:11 2025 by rpki-client