Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: gGQAgv4zpYbTFQ3+dxtpaMC0lQMhT+F8ccTaIXKtwx4=
Subject key identifier: 93:48:B2:28:FB:CD:B5:48:6F:5C:E5:AA:9F:CC:33:F2:65:7B:B6:7A
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 0199FD3435363F883EB8E87E2A44F9E5BB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 13E3
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: aNSmTa0ErVSxfEXGsFAFkOix0/nidRgkfJCi8nEP9Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:36:3f:88:3e:b8:e8:7e:2a:44:f9:e5:bb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=9348b228fbcdb5486f5ce5aa9fcc33f2657bb67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:d4:34:83:74:7c:1e:67:1f:dc:7c:e7:21:
2d:df:8d:ca:ce:5c:64:da:5c:3d:39:5c:63:8e:5b:
38:ce:ee:19:35:8d:15:87:05:e7:d8:e8:dc:a4:99:
39:84:cd:77:94:0c:e0:46:a9:57:6c:23:5a:10:13:
65:d6:8a:25:e0:30:48:13:9c:59:10:06:c3:07:42:
b8:ce:4a:f0:63:b6:bc:cf:07:34:91:a2:ef:cc:38:
d8:c9:f5:2d:ad:e0:e7:4a:98:16:32:32:7f:75:d5:
86:d4:52:d2:f1:cb:85:05:29:28:b0:04:fc:bb:f9:
0b:63:5f:42:d9:49:d1:85:5c:9c:d5:d9:91:4c:27:
ae:54:8d:d6:db:69:15:0f:c7:02:fa:36:99:00:35:
c4:f1:03:7b:70:52:19:ec:97:8c:f9:b8:8f:7a:6a:
c9:5f:21:73:fb:02:55:65:05:00:13:86:79:2b:a9:
d4:24:55:45:6c:9b:ed:32:2b:ae:1e:81:9c:71:10:
6f:e7:91:62:8b:2b:e8:3c:11:f4:ec:e9:00:d6:1c:
3e:73:a7:10:5f:6f:c5:30:db:d0:fe:f2:fe:c8:8d:
4d:41:ce:dd:d8:52:e6:62:bb:ed:38:57:a7:e7:1d:
a6:ac:29:60:ad:8f:90:f2:d6:0a:e9:32:32:13:50:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:B2:28:FB:CD:B5:48:6F:5C:E5:AA:9F:CC:33:F2:65:7B:B6:7A
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:98:a6:4c:f2:0f:93:8f:f8:41:1f:ac:19:cb:fc:64:d1:
1b:02:ea:f9:13:63:2f:cb:40:26:2b:07:5b:0b:2a:1b:43:00:
a3:ae:45:c3:b9:44:ff:43:6f:05:b7:73:7f:f5:16:37:b0:de:
65:f9:28:63:7d:94:64:be:ca:b2:01:e6:d1:62:b5:9b:78:47:
46:63:cc:0d:fa:23:af:b2:ae:85:50:6c:ff:29:2a:e3:1e:30:
c1:e3:2a:88:30:b0:d8:49:77:d8:63:92:27:ea:16:31:98:35:
17:ff:42:79:e8:f8:19:db:d8:51:89:d7:61:5f:66:ad:1e:1c:
c8:b3:03:78:29:08:63:25:9a:39:07:47:55:29:b2:4f:95:45:
7b:6e:81:00:81:7f:a6:64:97:22:29:cf:27:19:7c:da:c7:83:
a7:69:c7:2f:ba:91:39:ff:24:6f:b7:02:71:d1:1a:4b:72:79:
66:2d:0c:e6:52:58:06:10:47:72:06:bf:1b:9c:a8:bd:3a:67:
a4:f3:e3:9f:47:27:93:70:ae:ff:74:e8:c8:1a:3f:e2:25:af:
be:10:0e:87:2b:4e:82:1d:6a:70:80:75:a0:44:d0:ae:b5:24:
7d:ef:15:27:c4:f1:7e:98:a0:ee:d6:20:1b:d0:9f:58:1f:8c:
e5:91:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:10 2025 by rpki-client