Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: fLhFEC+sihhwD6Mq6fVXBMo1LSORpUSWYBUBBb0DQgU=
Subject key identifier: A7:A0:D2:48:C9:A8:0D:7B:5F:F6:1F:FD:68:D0:64:B1:E4:CF:A5:65
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0199FC59131CFA6F8128C85D489CB1564F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 144F
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: FU0uapsDvxzE/Kw0WtiFC7LtCocBBmx5EPPPlwUsC8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:13:1c:fa:6f:81:28:c8:5d:48:9c:b1:56:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=a7a0d248c9a80d7b5ff61ffd68d064b1e4cfa565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:e7:bc:8e:85:2c:e3:2a:02:35:f1:31:e1:
f1:81:8f:d1:82:b8:91:56:e7:27:c9:01:4f:38:8e:
e2:e6:84:6d:6c:71:fe:b1:7c:06:c1:20:d5:ed:c9:
2a:52:36:a2:3e:75:ab:4c:4b:68:d5:24:fa:f3:23:
09:f4:1e:45:40:9c:b0:f9:2e:4d:1e:8b:81:c1:68:
7d:11:8b:52:5e:c9:bf:82:84:54:dd:2e:a6:5d:3e:
91:60:52:a9:d8:cb:6c:1e:91:3a:7a:43:55:fa:2a:
f6:df:ca:21:4d:ce:99:2c:33:18:7b:2e:4f:ac:fb:
33:a2:46:eb:89:cf:c0:35:e6:47:3a:0d:c1:ab:98:
b3:7d:a9:43:57:37:e8:bc:5f:a5:ce:a3:8a:85:8a:
e4:75:7f:bd:61:1f:14:5c:cd:f0:d9:5d:87:79:00:
fd:a4:15:36:e3:19:dc:a6:86:92:4a:c3:c1:67:2b:
9b:41:47:4e:84:1b:26:63:b5:fa:65:c3:13:4b:5c:
19:5b:c1:47:4f:7e:56:1a:bc:88:82:9a:11:65:ce:
1d:e7:ac:a3:59:e8:8b:dc:67:96:fb:a2:ac:9d:dd:
96:6e:15:7b:cd:12:d1:f4:23:c1:59:61:fd:56:d3:
27:cc:96:e7:e5:9c:ef:2b:93:70:65:1f:01:00:6d:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:D2:48:C9:A8:0D:7B:5F:F6:1F:FD:68:D0:64:B1:E4:CF:A5:65
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e9:f5:c9:3f:25:a3:df:a1:82:1f:63:a9:11:ad:88:ad:99:
64:7a:e9:86:49:93:1c:e8:42:51:62:a9:f5:06:d5:5c:6e:df:
2f:6c:01:56:ee:b7:5e:d7:04:03:34:42:42:90:05:c9:41:27:
cb:b6:a1:d4:39:13:df:a5:4e:fd:26:be:03:12:72:67:11:ad:
e6:4d:05:e8:e6:78:d9:56:df:27:37:4b:c8:8f:cb:ce:fc:4c:
84:fb:70:1a:63:b4:22:93:8c:a9:68:98:f8:3a:76:6e:86:ad:
29:84:32:dc:27:5b:cb:03:f1:0f:0a:dd:0b:40:38:df:8e:a8:
3c:cc:52:12:bd:8b:d5:8f:6a:c2:35:ec:d2:a8:94:4f:f5:b1:
50:aa:8f:27:85:e3:fc:17:3f:2b:55:59:d2:8a:46:ec:f8:d7:
3b:f7:81:52:b3:f9:d3:95:36:6a:88:bd:4d:c8:7b:b9:4b:2e:
74:49:e3:f9:19:0f:23:16:94:3b:c5:e0:f3:72:d8:1f:22:73:
5c:ac:06:25:0a:9b:de:62:0f:f8:5a:ac:95:55:80:cf:0f:ac:
fb:7a:5a:37:87:38:b7:77:58:93:03:9f:6d:6d:6c:5b:f5:bc:
65:5b:9e:c2:fd:1c:68:33:f4:f1:a7:24:4d:d7:08:4f:2d:64:
84:bf:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:55 2025 by rpki-client