Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: hu+ZXRz1S3yR9Q3QwuiVe43cz3K17rt9yABqMTs+0hg=
Subject key identifier: 9A:AA:86:90:94:39:8C:8F:C6:41:A2:96:DE:44:0A:5D:E7:79:A3:9C
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0199FEEBC497F8C6F069410A95C543DDA605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1680
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 21SlIAf4zuoog6REZu65sTza3ifVivXjBLbBLri5t1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c4:97:f8:c6:f0:69:41:0a:95:c5:43:dd:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=9aaa869094398c8fc641a296de440a5de779a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:8d:5b:8b:20:77:14:73:76:8e:39:ce:c3:
42:05:e1:87:1b:d3:08:55:5f:98:49:9c:71:20:4d:
82:b7:d9:73:40:a0:19:41:7c:ed:c8:1a:80:06:b4:
e0:a6:9b:3d:93:81:5d:9e:d7:53:54:93:70:ea:db:
27:50:ea:52:72:62:33:1f:e4:80:24:58:30:38:28:
09:dc:1b:2e:36:b9:4f:68:b8:53:e2:e6:da:c9:e7:
10:b9:49:eb:4b:d3:bd:94:bb:3f:f9:ad:4c:81:f9:
68:6b:c5:57:08:18:cb:a6:e9:21:3f:7c:95:20:ee:
27:95:74:60:6b:0a:cb:05:55:e6:d4:c1:c7:a2:d2:
5d:6e:15:64:e3:65:65:dd:e2:c2:72:33:63:2e:81:
ce:c9:e2:24:cc:b8:e4:5c:88:e9:60:29:c3:28:d7:
cf:e8:d7:49:e0:c4:9d:ef:ec:60:00:f1:1e:f7:ba:
29:18:56:11:2d:fa:2a:d8:e0:2a:3f:b9:ce:57:96:
7f:6e:d9:9f:a9:04:d7:f9:2b:ec:26:00:83:6d:76:
93:76:4d:2c:ba:fc:b0:bd:57:fd:a3:3e:0b:29:4b:
8e:28:9b:9b:28:3b:65:35:9b:05:f4:16:0c:b1:a5:
83:45:ea:e9:9e:1f:33:24:78:2b:2e:da:08:d6:cb:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:86:90:94:39:8C:8F:C6:41:A2:96:DE:44:0A:5D:E7:79:A3:9C
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a8:1f:69:7f:30:a6:14:2d:6a:b1:39:63:77:ec:4e:eb:b6:
66:f4:6c:e5:62:d6:aa:a2:5b:7e:9d:a3:7e:58:02:7a:bc:bf:
52:78:ca:6a:fb:6b:74:d3:3b:ca:f9:c3:15:81:3d:38:e3:b5:
19:5d:6f:57:18:a9:9c:f1:7f:24:aa:25:96:1b:45:4d:da:e9:
6f:d8:31:5e:ad:a8:2e:00:bb:0a:27:91:7d:0e:ff:ba:69:bc:
d1:e2:30:fc:60:9a:82:f1:4d:f6:0a:5b:50:5e:3c:3c:26:03:
cb:ba:00:10:ac:9e:fa:bb:a2:02:1b:75:79:39:13:05:f9:97:
c0:b4:9d:cc:4d:37:c6:62:f0:f0:04:ec:19:5b:77:fa:95:43:
a3:26:99:6e:28:bf:ee:1e:68:97:b7:4c:4e:76:39:4a:fa:84:
3b:56:d8:c7:58:91:97:e0:3e:27:ad:53:43:34:f6:5f:d1:e2:
22:1a:8b:f2:47:ce:0d:bb:07:02:7c:38:9c:b5:bb:e4:ed:7d:
26:20:b0:31:10:f1:0e:fe:af:33:19:7c:ad:9f:64:e6:cb:c5:
16:2a:ac:48:81:46:fb:2e:1c:49:3c:12:67:f4:d5:a4:c7:8f:
f6:53:1b:b5:6d:a9:99:56:14:d1:56:c8:0a:63:1f:ac:ba:89:
e0:25:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:37 2025 by rpki-client