Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: 2gw+r/UTX8k8vRbR+7gUx204A9Ev/6QECTnoOSMy/TM=
Subject key identifier: 26:84:9F:B8:86:A6:EB:DE:66:12:43:54:82:87:2A:C2:C1:E6:05:C7
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 0199FC219E81AB6C6EF53763C341E56FAE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0CB3
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: P8LvrKYCtI_9k9pIXDDvB_mFdxQ.roa (hash: 6bur0sayGgh0sVPJYH4mk361HnE3wDlMvWYT8l9DJaQ=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: MDcn3zqflDzYfKW+zBAlp1VQW9w2t/HLM30BKQ4/MXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:81:ab:6c:6e:f5:37:63:c3:41:e5:6f:ae:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=26849fb886a6ebde6612435482872ac2c1e605c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:7b:9c:b7:5a:fd:34:29:0e:a3:44:fb:34:
31:6a:54:5d:0d:87:5a:77:db:88:d8:56:f1:14:7b:
0c:f6:ad:02:4b:6d:9c:c0:5c:bb:4b:ec:2a:fc:4f:
18:42:f6:3b:fc:9f:d0:3e:f4:f8:bf:56:b7:17:ff:
7e:f6:f4:e3:95:5c:9d:a7:f8:56:15:1e:2d:a6:25:
5e:c2:9c:8f:74:9f:b1:bb:03:32:66:10:25:8a:7c:
29:0b:37:3e:80:10:8f:19:6e:ad:7d:f1:3f:64:f2:
1f:2d:d1:42:4c:52:b8:98:1c:11:c8:22:82:9b:81:
a8:1b:c6:7a:b2:9a:2d:9a:68:d9:af:91:12:ce:da:
7d:a6:58:57:f7:6c:34:62:52:fe:e9:7b:70:3a:fa:
37:58:20:b0:d4:64:4d:f0:16:fe:7c:9a:80:77:c9:
b7:d6:fc:ae:d1:53:fb:fb:4f:fa:43:17:64:70:b4:
ab:ba:71:06:7b:ce:26:31:05:bb:9b:6e:e2:97:d5:
1f:95:2d:77:59:1b:d4:27:94:f1:ca:43:11:45:6c:
d5:57:06:cb:a5:bf:d4:06:1f:3e:06:d7:eb:b0:2c:
2e:ab:48:38:08:6f:d6:76:78:42:aa:54:bc:71:5c:
48:b5:3b:c4:1d:75:66:c3:9e:55:5f:d9:b1:2b:e0:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:84:9F:B8:86:A6:EB:DE:66:12:43:54:82:87:2A:C2:C1:E6:05:C7
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:d2:1d:99:9b:fb:05:54:92:d5:8b:1f:11:d8:c8:8c:5f:
5a:88:ee:b8:9d:c1:81:58:37:86:65:40:38:27:fc:9b:87:4c:
40:c9:95:86:55:1f:ab:71:2b:bb:a8:40:30:e0:88:86:98:9c:
79:01:04:b4:f6:47:24:1b:f2:08:10:87:5d:47:d1:d0:f8:6c:
79:c7:e2:2e:28:c5:d3:c3:4e:9c:5f:3b:ac:db:4b:cf:b2:ae:
c2:59:aa:67:4f:41:ef:42:2f:10:ed:44:b6:c9:c6:e3:15:5a:
9b:86:4a:a1:15:d2:f8:4b:a9:1e:6c:4d:b8:08:3e:55:fe:f7:
9f:7f:92:33:26:d3:37:cd:9a:03:0d:75:60:51:5c:28:17:8b:
94:36:37:70:c7:ff:fe:8f:05:c2:f7:8f:fb:62:5a:dd:0c:45:
b7:b5:8f:57:ec:4b:2c:9d:26:16:d2:97:0d:e7:26:c4:fc:7d:
d2:22:21:35:26:e3:5d:2d:da:3c:68:05:71:f7:54:8b:e8:50:
d1:ba:ef:39:26:82:83:51:ee:38:42:46:cd:69:13:14:0f:00:
df:f6:b3:f0:c0:06:46:3b:c4:ee:91:fe:bd:93:47:b4:eb:b1:
07:e7:a8:31:53:f7:15:e1:32:5c:49:e3:f9:72:a5:6b:d6:d5:
4e:0a:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:41 2025 by rpki-client