Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: jTjBU30Dtw7fkki3uuzpJWUchiq9AErjZIe3Yo+j6SU=
Subject key identifier: 73:EA:7D:1D:44:06:02:FF:62:97:99:FA:A7:55:47:FB:70:55:94:2E
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 0199FC8F51CB71612DB12AA1D0BD9332A9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 08AF
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: N+JzuzHsMayCJxv/8cWOVb42Ze/16LcU2YtXy9lTBJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:51:cb:71:61:2d:b1:2a:a1:d0:bd:93:32:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=73ea7d1d440602ff629799faa75547fb7055942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:49:df:6b:3f:9e:d5:02:e2:1f:e8:e6:6f:
fb:53:b4:f3:96:da:c6:84:d9:42:eb:de:9f:53:4c:
f5:d1:30:1a:71:f4:b8:d5:21:6d:23:c4:de:88:44:
de:de:ec:6f:a3:e0:0e:27:58:2e:96:47:a9:94:4d:
21:92:03:d2:88:02:22:21:a9:27:3d:08:65:8a:e8:
36:41:3d:92:46:49:6a:f4:57:d5:33:5b:e4:fa:46:
12:a3:ae:76:39:97:72:51:de:e0:52:4e:90:d2:74:
16:f7:c1:7f:3f:f5:5a:08:cf:e4:ad:e5:0e:bd:0b:
4d:4f:21:58:4f:50:cd:c1:6d:06:11:f2:d3:fa:73:
72:de:02:20:18:45:44:1a:51:2f:da:88:71:e1:dd:
2e:ec:83:82:3d:ae:48:e3:e9:a7:c9:32:ef:1b:61:
69:4d:6b:13:1d:42:4f:c1:b0:86:12:eb:61:cd:06:
ad:68:c2:ad:76:f2:1a:c5:db:1f:a7:1a:cd:21:36:
39:48:42:f0:be:84:f6:75:2f:cc:3e:da:19:89:85:
49:d7:06:ff:6f:20:e5:f3:97:39:60:76:c8:20:1b:
00:b9:77:a8:32:ac:44:ac:6d:bd:69:35:09:a3:9d:
45:0a:07:96:6b:02:e7:a8:a3:77:b0:9a:c3:c2:46:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:7D:1D:44:06:02:FF:62:97:99:FA:A7:55:47:FB:70:55:94:2E
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bb:68:be:d4:89:4d:82:ae:b9:c9:81:6f:dd:bc:76:62:bd:
d9:fa:be:01:2a:76:f2:4d:ba:95:e0:7e:10:9a:38:e4:d5:36:
75:2c:43:de:ba:1a:e0:9b:3c:f6:39:76:84:1f:f7:d2:a5:33:
4b:2d:c6:24:5c:ae:32:0c:34:69:51:49:6c:a4:1a:81:4e:3a:
97:ad:a0:39:af:31:5a:3a:1e:db:2c:9e:0f:64:84:88:eb:e0:
bc:68:53:d9:d2:45:c7:d1:2a:91:c3:28:dc:a8:15:89:48:f1:
d1:3d:0b:e5:21:0e:45:b4:a4:bd:6e:47:7a:2b:42:04:4b:43:
72:36:ca:50:8d:5f:77:82:b9:1d:45:b5:5a:d9:d9:ad:32:31:
00:1d:50:20:4d:87:16:54:ff:ec:39:39:f8:5b:6f:f4:26:09:
9b:77:ad:1c:e2:12:d5:ff:b7:3c:8d:7b:5e:01:ae:09:41:50:
9d:ee:6d:22:e0:96:6b:ae:47:b9:2b:ec:ff:7c:2d:2d:32:be:
a1:92:4c:10:d3:7d:96:83:3d:8a:57:54:b2:c1:7a:57:65:eb:
f0:a9:00:4b:bc:58:64:62:5a:3f:e0:34:2f:f6:01:9b:1f:09:
23:59:da:87:d6:98:5c:1d:5e:38:c8:cf:17:f5:0b:d7:f8:18:
02:e2:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:12 2025 by rpki-client