Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: 5j8jTiJcZbTmS5qGduvOWmkM+KjtbNbeDzN6CVunbfs=
Subject key identifier: 0E:65:83:D0:04:9D:AA:C9:CA:E6:DA:FC:00:5F:45:5C:1E:69:DF:3C
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 0199FC586DAD909C732E507C6031514208B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1265
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: KFmx38On35YwQ8HCElCf60+QU5YPnqsRaiyLmzxuFKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6d:ad:90:9c:73:2e:50:7c:60:31:51:42:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=0e6583d0049daac9cae6dafc005f455c1e69df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:78:d8:dd:ab:7e:f9:e0:b5:0f:a8:64:58:
b4:5d:08:ac:51:c3:2d:c2:2d:9a:2f:43:85:80:d6:
0b:76:26:b3:3e:21:d2:37:3d:db:9a:aa:b4:59:12:
7c:b7:0c:53:b0:c2:bb:f2:cd:ee:ac:2d:f6:b5:cc:
af:61:be:83:d2:4c:bc:e1:6e:f6:21:6c:dc:86:b3:
86:c2:77:87:0d:f1:5b:2a:99:71:8e:af:5f:c1:1d:
f0:0c:6d:55:a3:7e:13:43:6a:2f:cd:46:b2:57:1a:
42:b0:fc:40:64:e3:ef:d6:db:bc:4b:49:a9:b4:32:
dc:a0:e0:25:c7:17:46:9d:18:f4:0a:a7:35:7a:81:
b8:7c:f1:6f:b7:4e:bf:e4:e1:08:a1:03:52:95:4f:
98:7d:9d:86:ce:bc:c9:bc:11:fc:85:4e:5d:59:49:
4c:bc:f1:9f:ef:88:2b:ed:b5:f0:8f:7d:c7:e6:c4:
df:90:f9:43:06:99:dd:29:09:45:40:c8:aa:1a:b0:
6b:c4:b5:91:fa:12:66:fd:b2:2d:88:09:fa:39:6f:
51:7c:37:ec:6d:e2:69:68:2a:7e:6b:fe:51:a0:9a:
61:6d:db:d3:19:39:8d:e4:d9:86:65:11:36:c7:ef:
a2:7b:2c:44:19:25:cb:fc:c2:26:e9:5b:bc:b2:75:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:83:D0:04:9D:AA:C9:CA:E6:DA:FC:00:5F:45:5C:1E:69:DF:3C
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:ad:8f:c5:8a:16:3e:a3:78:5f:7c:d9:5a:c0:43:02:c9:
c4:a1:c7:c2:b8:0b:3b:39:12:92:2d:13:e4:e3:37:83:3b:a9:
c1:e1:0f:d4:0b:78:90:1f:7f:64:ce:19:91:f2:38:b5:70:10:
82:7a:6c:9d:49:ae:5f:ae:4b:06:7b:cf:94:5a:63:25:10:7c:
ff:33:9b:0f:d5:4c:de:01:ff:91:79:96:73:f7:fc:4c:a4:e6:
50:cd:5a:c0:a0:da:00:4b:94:a1:c7:07:84:b9:5f:4d:c9:50:
11:9d:5f:7f:69:1c:3e:8d:e2:6f:31:da:0e:54:e0:df:cb:9c:
f7:29:67:97:29:ab:bb:c9:63:fa:86:86:0a:a6:57:8b:df:11:
56:a0:f9:f9:e4:e0:25:bc:0f:a5:8f:46:14:aa:f8:0c:6c:4f:
bd:cf:4d:90:d4:d2:2b:de:41:d5:54:02:e6:ed:19:b8:7f:9e:
21:5b:5e:fa:b2:aa:d5:1a:38:f9:cf:d8:9b:60:b6:44:ed:56:
2f:cc:13:b7:43:a3:75:48:06:58:3f:36:13:af:d8:e3:bf:bf:
e7:de:37:7a:ef:ae:8b:19:6b:cb:2e:d2:eb:e8:c5:82:aa:3e:
0a:8d:cf:01:e1:b2:d3:0a:0a:30:54:3e:d8:f1:d7:3f:7a:57:
5b:17:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:13 2025 by rpki-client