Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: prJh0uhOU6PJBGKx8A7de10EkfiNl+iwX4RHYh3eHS4=
Subject key identifier: F3:99:DD:E2:54:16:E9:9F:1C:82:7A:5B:06:9A:FE:15:A3:A9:DB:19
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0199FCFD327CC66FC4D135A008C4C5B83F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 02FE
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: qfkl4ugDwVER8WWCfmspxbN_99Q.roa (hash: Hk6Dp+LsA1AjgFfnUQPOphNg3N7O/mK1D22CLXcTXWU=)
3: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: ykHQe3OJtbrsgr+ZwFN9Dy0rgzi1rcoU29t/fjD46G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:32:7c:c6:6f:c4:d1:35:a0:08:c4:c5:b8:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=f399dde25416e99f1c827a5b069afe15a3a9db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:b4:48:7a:79:83:ea:90:d3:2e:ed:cc:ae:
42:86:09:ef:3a:f0:8e:8b:a9:24:0a:57:df:cb:9a:
5f:5b:bc:5c:9d:7e:0a:78:1e:29:ae:39:17:e5:6a:
36:84:a4:dd:71:59:65:09:62:47:0f:6a:4d:5e:c2:
18:7b:d4:71:60:9b:61:43:0c:67:6a:0b:d4:5f:2a:
52:ab:dd:a7:ac:85:84:0a:d6:25:a6:25:9c:e5:f9:
7e:ea:d9:32:a8:7a:98:bb:4a:ab:80:df:19:e0:36:
89:46:bf:2b:52:82:b5:ae:03:b3:dd:bd:3b:69:03:
a4:f5:d6:17:ba:c2:c2:96:05:cd:48:78:db:94:21:
21:41:49:dd:6d:fb:d3:c5:25:54:76:dc:ba:ad:95:
4b:7e:ac:1c:c5:f0:b3:bd:c8:52:86:d5:30:8d:b3:
4b:a1:d5:31:8f:98:92:d6:b3:f1:89:7d:a0:18:fa:
40:0d:20:b3:cb:4d:fd:9d:c6:19:48:5c:13:2d:c3:
64:bc:07:7c:bf:a3:45:ce:44:8b:4c:7f:a4:22:70:
47:c8:6f:43:ac:26:08:ee:7e:de:23:28:4d:a6:86:
8d:f6:b5:6c:47:06:9c:54:59:1e:8c:fe:fc:05:fe:
54:5c:5a:ee:2a:81:9b:cf:6a:41:6a:a9:94:5f:3b:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:99:DD:E2:54:16:E9:9F:1C:82:7A:5B:06:9A:FE:15:A3:A9:DB:19
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:69:fa:22:0f:91:c9:46:0d:53:f4:f5:0d:78:24:7e:63:
b6:a7:7d:43:3d:55:f8:de:fe:03:ce:1e:2f:10:b2:fb:41:ae:
c0:51:f5:43:9c:7c:42:36:24:75:fb:ee:b9:87:c4:15:0d:96:
93:e7:3e:e9:46:30:8f:6c:02:a1:ca:af:70:89:ea:cc:14:2f:
15:07:44:3a:c9:c7:2f:26:9c:c9:17:df:71:d8:a4:0e:b1:10:
f1:7b:6b:29:20:95:5d:5a:ad:93:32:aa:02:e3:d9:40:ad:5d:
6e:87:94:dc:e4:0d:d4:44:9c:ea:ce:ee:ee:92:ef:f6:44:d5:
2b:1e:15:63:94:18:75:76:31:b4:2f:53:3a:7f:ef:35:26:96:
6c:19:d3:ac:1b:55:5f:fd:92:f8:28:cf:75:23:56:a7:f5:b9:
ef:94:d0:e1:5d:e8:67:84:c2:9e:3c:11:09:40:58:97:3b:39:
84:99:ca:56:c2:9a:1a:a4:53:07:8f:b7:e0:56:97:cd:49:c7:
10:61:a5:22:3e:b2:dc:18:7b:5d:e4:75:b4:36:f7:c1:3f:47:
ac:e4:97:61:3b:c0:c6:e5:06:31:83:e4:a3:f0:c7:b6:71:04:
8a:77:d3:0d:96:6f:22:25:3f:b2:c7:85:0b:1d:75:ed:c7:9c:
19:29:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:31 2025 by rpki-client