Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: mJCv0INSZyqNG3cUBpwYFbOWE9XTno5dfs0IFGUW8js=
Subject key identifier: 6E:DC:CB:DB:A4:89:EB:AA:D7:E6:60:D3:49:1B:DB:DC:DC:BF:3E:D0
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0199FC213E0A6CAFFBF37CC21F69614A0728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 03C8
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: 8Px7OJJKXOMrieUPOYmrzzitAqydQQqSE4HB/41475A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3e:0a:6c:af:fb:f3:7c:c2:1f:69:61:4a:07:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=6edccbdba489ebaad7e660d3491bdbdcdcbf3ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:93:06:e1:5a:4f:d8:6b:2a:f3:6f:05:21:
30:b6:d6:21:e8:a2:82:29:6c:29:f6:3a:ee:09:cb:
7e:c1:f0:4d:8e:7b:30:71:dd:e1:04:e7:25:1c:f5:
14:5c:9c:39:55:6c:1e:80:ad:11:91:eb:84:46:08:
74:eb:b8:7e:c7:f7:bc:27:8b:03:34:d9:c8:12:c1:
ca:1e:76:ad:d7:06:bb:55:dc:c7:08:ab:3c:a4:80:
20:c3:a6:de:7a:8c:cd:99:7b:1e:9e:d5:1b:8f:44:
be:d7:b0:e8:2c:e9:63:f6:ce:54:33:0d:45:27:89:
5f:dd:c2:85:10:16:3b:03:bc:31:b7:9e:f9:22:bd:
75:e6:4a:47:9f:c5:eb:0d:f7:33:32:ee:53:72:f9:
13:3a:35:7d:60:67:0d:b9:fc:1c:fd:13:9f:44:d9:
f5:15:d6:79:5c:fe:2c:36:88:23:e4:d6:9f:b5:22:
b1:9d:f4:8a:82:6e:96:4b:42:96:f7:20:f8:da:40:
44:ce:11:60:e5:0f:73:f1:f0:25:c5:4b:7d:73:45:
14:c9:1d:6f:41:14:66:4c:be:d1:3e:7b:e7:75:d5:
9a:4d:eb:71:31:f4:9a:9b:c9:18:08:65:f3:af:07:
d7:eb:f3:33:e6:24:b5:af:1b:52:c1:b5:fa:0e:58:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:CB:DB:A4:89:EB:AA:D7:E6:60:D3:49:1B:DB:DC:DC:BF:3E:D0
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:d1:a4:26:7b:9b:16:89:0b:ed:5d:de:16:1c:7c:a4:fb:
0f:04:62:a7:38:12:b5:6f:87:16:ec:cb:2f:ed:33:f5:ed:2e:
91:ab:4b:eb:de:ac:13:a9:94:f8:5a:b3:f8:5f:f5:73:df:23:
43:99:e1:a1:d6:08:ce:66:5b:cf:f7:88:86:25:d6:4e:da:4b:
22:ec:d6:c8:1b:54:66:c1:a5:74:a0:ed:5f:d6:71:71:3f:52:
df:ca:b2:0f:36:b8:ed:1d:db:30:f8:d3:ca:25:9e:01:6b:46:
93:0f:2d:59:02:b9:68:cf:a3:85:db:3c:e5:52:cc:48:ea:a5:
ca:76:f0:38:6f:9d:9c:70:fe:a2:59:3b:0b:28:89:da:ff:e9:
c7:bd:5c:a0:8d:b3:b3:6f:7d:bf:40:f0:80:49:b4:af:3b:8b:
82:6c:4d:c7:11:32:64:6a:92:f7:53:31:9d:e8:63:dd:d3:59:
2b:98:be:6d:d6:f4:2d:cf:f5:11:6a:07:34:61:9b:cd:34:66:
45:a5:77:a7:7f:9b:d4:48:b2:02:de:10:b7:33:2a:20:78:85:
4f:73:0f:29:bc:ab:74:a7:6f:61:93:1b:6f:c1:d0:98:ac:b9:
74:8a:e5:3c:d0:20:38:b9:c9:87:a7:6e:aa:e3:6d:4a:0a:68:
38:ef:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:16 2025 by rpki-client