Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: gdW/coVi9dRXiWIOXMduE7YiUu40g/JyXKgbiL+YBpI=
Subject key identifier: 44:D5:45:A7:C8:CF:24:46:D6:97:4A:0F:E9:38:34:5A:2D:4D:F4:70
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 0199FCFD8FD7BDDA683CB7D0D319542C41C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 163A
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: IsOVUReaHUavHisw4Pe4nmasGRpVBGhUZt+K8gFmlZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8f:d7:bd:da:68:3c:b7:d0:d3:19:54:2c:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=44d545a7c8cf2446d6974a0fe938345a2d4df470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:88:57:52:bf:5f:13:52:23:05:41:d9:c8:
69:d3:7a:d6:15:fe:40:7d:c6:50:2b:3e:f2:72:57:
d1:55:a1:83:a2:2a:b1:40:55:f9:77:06:93:f1:f8:
3e:8e:dd:03:6d:df:00:b9:c8:f6:2c:6a:db:a3:70:
f1:73:fa:29:31:24:8c:a3:9a:77:8d:19:b3:e9:a2:
69:1d:10:6d:f0:ed:b6:52:28:f8:f0:a6:b6:95:f6:
85:32:fb:06:45:56:b1:2f:cc:d8:61:82:4d:ac:22:
1c:fc:27:51:29:17:56:2d:60:e8:f6:d1:20:aa:d4:
5c:07:0d:d4:51:11:05:57:43:05:d9:3a:c3:d2:f2:
be:44:76:43:36:4f:1c:7b:0b:f1:c0:cd:ec:be:32:
1c:5f:60:20:46:08:ce:2e:f0:15:64:41:ac:86:5b:
ed:2d:0c:b6:96:31:7b:4f:83:aa:4d:17:c9:f2:38:
84:87:61:ec:91:c1:9a:72:2f:54:0c:6f:98:ee:2f:
ca:0d:36:d1:b6:04:49:5b:c7:65:39:4a:42:fd:44:
60:c7:44:d3:f2:47:8e:f7:f3:3f:df:49:bb:8e:52:
5e:48:7d:51:1c:86:ba:6f:d9:11:d3:1d:51:9b:62:
f6:43:26:d1:78:fc:14:d3:57:bf:d1:82:0c:6f:61:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:45:A7:C8:CF:24:46:D6:97:4A:0F:E9:38:34:5A:2D:4D:F4:70
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:30:13:c3:24:fc:05:d0:31:e3:55:cc:f6:b8:8b:31:54:
43:1f:6c:b2:ee:36:ad:a8:1b:87:5b:33:7d:de:29:2f:1b:85:
4d:40:39:4b:e7:68:fb:9d:f3:ea:1e:5d:2b:a5:f9:fb:2d:d9:
1f:1c:9f:67:c0:9d:ce:8f:a5:e5:22:64:3b:57:a4:5f:0d:8b:
51:e4:f7:b2:02:31:c2:08:11:bd:9c:84:6e:d3:27:ff:48:f5:
ba:fe:2f:6c:79:41:70:83:26:e9:60:a9:1a:ea:1b:14:f3:39:
6b:ba:2e:c5:dc:ac:b6:17:ea:ff:16:57:2a:29:5e:47:58:91:
e8:2b:1e:8c:d7:e3:43:dc:f4:84:7b:37:33:85:cf:c2:34:86:
7e:79:65:b5:0e:91:ef:06:ec:0b:bb:a7:14:30:1c:74:57:f3:
b0:24:85:51:61:9d:eb:3d:6e:12:bd:39:dc:ed:83:45:a3:1c:
51:ff:2f:da:e6:5f:20:03:39:bf:72:d4:8e:46:c3:8f:97:4b:
cd:01:df:e3:f2:7d:eb:24:30:d1:65:d3:e5:5e:fb:4a:70:86:
c8:4b:fb:81:cc:84:78:94:8d:a0:7e:a1:21:31:e9:94:d4:90:
a6:e5:48:c3:74:ec:9e:cb:c2:b7:b2:6c:e2:78:f0:39:6d:f5:
f8:b5:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:38 2025 by rpki-client