Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: zQJwH/fW4L/DyNWoKiaCOC9uMb7eHleJpFh8e+NpPLQ=
Subject key identifier: 24:3D:30:EF:4B:0F:56:F2:08:5F:3B:0E:5F:C7:D2:BB:DC:11:6C:06
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 0199FBEAB969F93EB3124603A4722E3A5994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 05D7
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (hash: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: yKp+fuOiay14bXWsJ4a5HMEG1OzxbLErdh/MhmjVdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b9:69:f9:3e:b3:12:46:03:a4:72:2e:3a:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=243d30ef4b0f56f2085f3b0e5fc7d2bbdc116c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:4c:b4:89:07:4c:7d:36:92:65:ca:c5:0b:
e0:f0:9e:2d:f4:b2:f7:05:23:6d:0f:72:cc:f7:e5:
f3:5c:4b:57:f8:2a:45:9b:8e:f1:6d:3f:68:66:b7:
3e:6b:d8:79:f4:71:0a:5f:bf:45:64:fa:6a:8c:81:
52:35:09:bf:b6:8a:88:44:88:2c:71:77:b8:b3:36:
45:71:73:d7:c4:d3:7b:41:16:f9:c1:7d:be:e4:dd:
ae:da:e3:08:a2:25:09:0a:eb:69:a8:3b:22:c1:e9:
f8:dd:98:fb:a2:a8:94:e0:cf:ef:e5:ab:99:4a:cb:
b9:14:bd:00:da:c9:a4:f2:36:a8:e7:32:a7:1d:f0:
56:23:a1:55:75:44:96:08:e6:5b:b5:30:e2:87:a5:
b2:4d:1e:f1:df:be:3c:dc:54:27:79:e5:ee:65:0c:
f7:b0:91:cf:be:54:06:6d:55:7f:bd:17:4b:7a:89:
f7:63:1b:1a:e4:fa:98:e9:a3:72:dd:ca:eb:fa:d2:
87:87:b8:0d:6e:6b:75:00:70:58:36:6c:6f:db:51:
f2:91:16:43:ef:47:10:55:7c:fd:ec:1a:3b:d4:85:
ec:ae:03:cb:5e:f8:8e:c6:fa:69:bb:77:52:79:6e:
dd:dc:29:6b:b6:19:64:74:14:15:9f:52:61:9b:aa:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:30:EF:4B:0F:56:F2:08:5F:3B:0E:5F:C7:D2:BB:DC:11:6C:06
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b4:f9:87:d6:b7:ad:75:59:be:53:64:02:ce:f7:f0:ac:0d:
bb:c0:ea:f7:2c:ad:3b:ad:be:aa:ed:53:c3:1e:28:e9:fb:92:
45:10:c0:04:62:a3:18:96:31:76:71:9c:96:3d:fb:b3:3b:57:
ba:df:18:a9:c6:21:1a:4d:97:8f:33:f5:00:e0:9c:41:c3:f2:
0d:02:af:58:17:aa:c2:97:74:98:39:1b:28:a9:27:bf:dd:95:
5d:f4:a0:df:d1:ed:42:8f:51:0a:0c:2d:de:12:14:97:9f:86:
22:c5:b4:f7:eb:44:31:3c:b6:2c:c6:86:a8:3f:50:ee:24:d9:
a9:68:00:45:75:f8:dd:f1:68:6a:70:ee:47:a1:a7:87:73:18:
cf:52:40:93:ac:7b:65:c8:60:21:19:1a:e6:32:98:2e:f5:1c:
c8:43:b9:e5:21:8c:a3:ca:08:82:c1:99:a8:f8:c4:5a:95:07:
e6:18:d2:e4:e1:e6:42:4e:ca:3a:da:b5:c0:24:43:a3:b7:7b:
59:06:7a:65:a2:84:96:36:21:40:09:17:3f:2e:3c:0a:d0:34:
f7:b7:d1:61:2c:53:07:a9:a4:f9:08:3c:59:80:74:4b:aa:79:
6e:51:e4:f0:87:06:56:1e:8f:f2:30:84:1a:12:7c:41:c1:0f:
84:a0:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:18 2025 by rpki-client