Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: snhw3i87/+vb7Kg/V8WXllql+bZeIMR29LVws/FieyA=
Subject key identifier: 4C:C1:0C:8E:B5:F3:A1:36:44:63:66:F7:69:49:CE:EF:1C:CD:A4:51
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 0199FC588BDCDBBF7B164D375AFEC938594D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0D49
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: zSoFxS3S80Sl3JoUTiz+dxAOUvVRnPHqlNfice4Jgzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8b:dc:db:bf:7b:16:4d:37:5a:fe:c9:38:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=4cc10c8eb5f3a136446366f76949ceef1ccda451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:35:8b:d0:d7:4f:6f:c7:fe:03:43:98:a0:
ab:71:8a:0e:de:11:3d:1d:3b:f6:3b:de:22:96:6f:
67:91:1a:af:04:9c:22:60:d3:bd:06:90:33:99:f7:
ea:d1:ee:00:6d:6a:ae:8f:68:50:ee:f5:c1:4e:36:
21:a9:46:31:0f:ec:a7:c3:f4:2c:b5:db:a7:d7:ec:
2b:5f:ce:67:8c:98:93:85:9d:71:56:a4:03:46:79:
5c:54:63:3e:25:73:64:28:63:67:01:b3:86:c3:09:
94:ea:e0:cb:61:58:91:5f:62:c6:34:e7:34:53:ce:
89:1d:29:09:a3:de:da:43:4a:4d:d3:62:4d:43:7c:
19:ae:02:69:a9:71:98:fb:3e:af:dd:cd:d8:a8:41:
97:0a:b3:da:26:cf:b5:f1:e3:39:6a:28:48:c2:26:
27:37:f7:15:f2:bc:fb:24:f4:fd:01:ea:eb:a9:52:
61:5e:2a:28:6a:4e:e1:af:2c:d9:f8:1d:87:84:32:
65:27:38:b4:ed:8f:5c:bb:e7:a6:83:ff:61:0d:eb:
48:5e:cb:a0:89:f3:d6:09:bb:d9:33:12:78:f7:06:
4d:34:c9:f9:42:d7:63:b2:7b:25:25:81:e0:20:91:
88:75:5a:46:d7:46:04:b8:f3:ea:47:46:88:aa:0a:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:0C:8E:B5:F3:A1:36:44:63:66:F7:69:49:CE:EF:1C:CD:A4:51
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:c2:18:e6:b0:fd:13:75:98:d0:e7:2e:3e:ef:75:03:2e:
ce:09:c1:3c:01:32:bc:42:a1:d2:86:f8:fd:a1:c4:11:3f:55:
67:46:87:20:b3:96:10:e0:92:11:13:14:1f:af:30:2a:1c:23:
cf:43:a6:30:e0:8e:cb:4c:88:af:f2:88:d7:82:b1:d5:8a:dd:
e1:19:06:c7:df:79:41:a7:6e:02:39:77:65:87:30:e6:7c:37:
01:0c:75:35:7f:dc:8f:92:aa:63:f4:8e:98:06:95:1d:08:9f:
07:41:ec:f3:55:19:2b:73:66:80:26:a3:9f:bd:57:fb:54:aa:
a3:d7:e4:1c:69:4b:a0:43:96:77:76:a1:5f:64:07:00:4c:5d:
7d:d4:e0:ff:b7:41:69:ef:2b:5e:45:72:97:4f:cb:de:dc:4a:
2e:47:2d:a7:d7:18:57:60:f1:1d:06:2f:c2:9b:9c:e4:31:87:
47:5c:da:ba:cf:78:6b:f9:12:88:96:3b:2b:48:01:00:b7:11:
1b:5f:1e:f3:64:02:28:5e:05:f9:a3:57:00:77:ec:4c:59:b3:
19:bf:7f:e9:8a:6d:54:ca:0c:8c:e0:69:b6:8a:ac:a0:0b:cd:
6f:9d:ec:ff:55:82:4f:95:de:b8:76:df:72:65:f9:36:03:18:
d3:5e:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:43 2025 by rpki-client