
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: iqK6cVlqxTOfuSInUg3CWvK/CYDiyewJEz+CNWdtbkE=
Subject key identifier: BB:0C:3B:51:BC:04:19:B3:E8:E7:36:0E:BA:90:14:FE:36:B8:01:CD
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 0199FB0F1EBD2F1D05055BACB45E9E3551E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: 92
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: o4QGe1oVFAvlinc81nAuNrtMaoE.roa (hash: gIUvO01SqzkXQhjCsB61bL9/pNHUHKOGVQndKRDnyOA=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: CB999YCE0EZoP7inz0SWTMuQKYUZ9unAx4JME8CPQ3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1e:bd:2f:1d:05:05:5b:ac:b4:5e:9e:35:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=bb0c3b51bc0419b3e8e7360eba9014fe36b801cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:2a:34:41:fe:23:a3:7b:46:40:9a:22:7f:
f6:16:d3:e7:75:c2:d1:87:e9:89:aa:ef:7e:42:9e:
45:43:d2:7d:9f:0a:ce:0a:d5:43:36:78:46:8f:82:
ff:be:f8:e8:17:b5:63:24:2e:1a:61:87:02:27:1c:
77:bc:e4:3c:5f:e9:f9:97:bf:01:2c:8b:79:de:6f:
e6:0a:0e:2b:a3:69:d5:50:80:27:21:e5:d8:d5:5d:
f6:f2:92:af:1c:1c:e3:12:c3:8b:11:6e:de:30:0e:
0e:ba:a4:39:48:0d:13:6a:eb:10:a2:f5:55:c4:36:
39:e1:20:44:42:4e:62:30:43:a1:20:11:91:c7:b6:
69:da:c5:da:22:3d:01:aa:5f:59:fd:ac:39:01:15:
da:b4:c2:b0:35:e9:ad:28:c8:b3:84:0d:b7:07:cf:
28:f3:6b:4e:aa:bf:e3:4a:ee:26:ea:93:8e:c3:75:
5e:e5:8b:77:e8:16:19:f1:28:54:c0:e9:64:3e:cd:
2f:f9:26:6e:90:1e:1e:21:e3:01:41:14:d1:09:98:
63:58:05:c8:f3:79:5b:77:a7:d5:ce:1f:6f:4e:03:
89:6e:58:16:bb:d8:98:74:1c:a4:26:86:7a:b5:a8:
d9:b3:47:2f:ef:95:f9:e2:46:67:3e:66:f7:4c:b4:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:3B:51:BC:04:19:B3:E8:E7:36:0E:BA:90:14:FE:36:B8:01:CD
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:b9:62:a9:47:68:23:19:56:60:67:2a:6d:62:19:0b:8d:
63:99:81:fc:55:2a:46:10:a6:c6:ca:5d:ba:09:75:f4:10:81:
c9:7a:84:2b:0c:26:de:fa:61:1e:e7:8e:62:a9:51:5f:9c:89:
ba:65:57:e2:15:c3:6e:10:19:76:be:71:74:b3:b5:8e:25:aa:
60:73:0f:38:8c:19:c4:9d:d7:46:f3:77:22:8c:f0:c6:1d:c6:
94:dc:4f:63:ba:47:bd:2e:1c:de:ae:35:db:4c:26:29:d8:f3:
bb:ed:f6:45:02:d1:29:31:33:13:0d:41:13:85:a8:a5:ea:f2:
f4:15:69:1d:d1:89:7c:98:04:ed:f9:9c:67:7d:a8:11:6f:9f:
5e:69:fa:bd:e7:53:c7:df:4e:69:73:65:7d:88:a7:2d:81:95:
a9:67:fb:52:81:6f:47:6d:e5:51:2f:b9:1e:78:ab:2d:ff:62:
ac:b4:70:71:1a:d1:39:e6:54:e9:9d:13:81:27:e7:cb:00:9d:
dd:d8:a4:e9:33:61:22:ea:ff:a9:eb:1a:22:57:23:07:c5:1b:
9a:47:0e:bf:c0:ea:77:06:3e:81:03:d2:36:9c:de:84:a6:cb:
19:ee:05:9b:ba:67:74:0b:c3:46:84:47:6b:f8:9c:d8:53:2d:
96:e1:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:06 2025 by rpki-client