Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: sDHY8xuVpfrsRaiIWi7Hr+3VnQVVv7yLoOWB8vb0rpk=
Subject key identifier: 5C:20:2D:C8:2B:7B:52:CF:9D:15:B6:33:9E:39:83:94:94:7B:07:B8
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 0199FBEB5210C33A27B38B2FB76D7FD39CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 10FF
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: tcYdKpcSN2i3gTPn2xCCD7ZeXY7efOgZpn6utTDwTjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:52:10:c3:3a:27:b3:8b:2f:b7:6d:7f:d3:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=5c202dc82b7b52cf9d15b6339e398394947b07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:59:e8:b0:af:68:45:0b:f4:82:12:d8:88:
ef:1b:84:ea:47:e8:1f:2a:f1:f1:93:db:bd:f2:05:
cf:f9:24:e2:eb:da:99:6c:4f:68:b4:cb:45:35:5a:
46:74:7c:d6:0a:86:8b:fa:3f:d6:ee:1b:d0:fe:77:
fb:93:9e:eb:70:91:77:d2:68:0f:13:ac:7e:94:af:
81:90:99:0c:0e:17:30:3f:79:5b:c1:a2:d5:dd:8c:
9e:5d:c6:be:6e:a9:d0:04:23:2b:d3:90:bb:c4:b7:
da:89:ec:fe:94:4e:f2:b6:80:7a:62:ba:83:8a:02:
b3:37:c7:ad:c0:44:9a:39:c1:2b:ae:57:eb:d6:79:
9e:bc:2b:01:5f:99:db:9e:a8:b3:f8:85:27:7c:42:
83:d4:25:3c:bf:de:86:07:a8:e8:a7:75:bc:11:56:
ba:06:6b:04:3d:5e:ab:41:44:a9:20:15:34:d1:9b:
2f:48:8c:32:a5:8e:07:68:e1:4c:7f:78:a0:75:75:
7d:df:57:d8:68:f8:4d:3c:25:6d:b5:9f:ec:4f:b5:
58:ac:21:ec:a0:ae:9f:8a:00:38:80:fc:f3:ce:f2:
89:10:bb:29:ed:7c:0d:82:6a:5b:6c:c9:a9:79:7d:
45:9d:dd:b3:0a:48:f2:5a:78:f6:5e:b5:f5:0e:6b:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:2D:C8:2B:7B:52:CF:9D:15:B6:33:9E:39:83:94:94:7B:07:B8
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:1d:1d:84:72:3a:21:a1:7d:b7:16:62:86:ca:57:73:f3:
d8:b6:2d:b1:e0:8f:95:36:bf:f4:92:f9:d8:fd:0a:55:39:48:
3e:f3:54:0f:c7:7c:e9:c0:57:6b:79:39:50:57:0d:14:4f:5e:
d6:9b:92:e4:8a:c5:31:1f:b1:8a:12:9c:af:f0:f4:af:ab:ff:
61:c1:0b:58:ea:65:be:2b:6b:1a:42:1b:de:10:a8:c5:81:18:
ec:68:0d:5a:37:f7:4b:4e:fa:32:f0:67:2d:73:8e:f8:9b:21:
ee:f6:34:cd:21:ee:61:39:2c:f4:8a:7f:6c:d5:3d:b2:93:10:
48:aa:96:85:07:bd:56:50:6d:e8:b2:de:2e:58:01:e7:e2:c7:
fc:0e:f7:ee:c6:74:66:01:ff:6d:d5:2a:27:8a:e2:09:7c:6f:
53:37:51:d2:62:70:56:e9:e0:92:94:4b:2c:13:3a:7b:22:6f:
79:81:e6:f1:e8:70:44:6a:18:be:4b:de:bf:5c:e0:43:23:d9:
0d:10:90:13:89:3b:30:81:7b:b9:eb:a9:7a:e6:49:09:de:5c:
52:b2:be:b1:75:70:08:e6:67:23:f3:a5:65:dc:2c:e3:51:05:
f3:40:31:15:73:1a:60:e2:7d:ff:f4:a2:0f:53:0c:38:9a:d6:
45:0a:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:10 2025 by rpki-client