Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: NvSDUZsfK5m1Pz0Dezq+o13aJ/TcC/cj00z5MuALQKc=
Subject key identifier: 13:39:2B:8F:5A:C6:36:EF:0E:4D:44:54:FF:3A:1F:3D:F5:02:A4:E8
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 0199FC8F9A408E685E4791D3AEEA6DC531F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0F63
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: 4P0qdUZ8tBkkbRNzM6Er4aLsxGvEsauRtrz/pz/uerQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:40:8e:68:5e:47:91:d3:ae:ea:6d:c5:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=13392b8f5ac636ef0e4d4454ff3a1f3df502a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:ee:7e:72:0c:12:c4:5a:77:9f:49:30:69:
25:94:80:c5:3e:1b:6a:ce:2f:eb:01:95:99:29:8c:
ad:95:2a:51:25:33:3f:0a:c1:9f:8c:e2:15:1b:ca:
6b:d4:0e:6b:be:59:79:df:19:bd:aa:08:3d:85:30:
ba:45:d0:49:2b:5f:bf:3d:97:bc:a4:4f:90:9d:0b:
ca:5f:f1:52:11:75:d1:16:4d:9a:70:12:11:23:7d:
ca:fc:60:44:8f:fa:ad:f4:08:1b:b7:4f:d6:a8:f7:
c3:7a:ba:1a:94:6a:ba:3d:c7:a6:aa:dd:c2:d0:3b:
21:07:d7:f5:09:ce:88:e3:85:27:8e:f3:60:31:29:
7f:97:5a:bd:3f:59:a7:90:15:6f:5a:50:3b:1d:6d:
d6:1b:9e:58:c9:6b:d9:78:f2:f5:97:09:98:c4:0e:
75:58:75:7c:d9:45:1b:d1:54:10:5c:a6:3c:22:1b:
0b:c1:74:5b:37:3e:a2:29:39:9f:49:64:2a:ca:30:
e3:76:06:1c:2a:ff:ae:9a:30:6d:a9:20:34:e4:a9:
1f:a4:26:ac:38:d9:30:8a:a2:93:a4:8f:22:7f:e4:
3f:b3:96:76:dc:65:12:f1:85:0a:50:08:ca:28:ef:
c5:5c:6f:85:35:f8:fc:8a:0f:f1:60:ef:41:4c:4e:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:2B:8F:5A:C6:36:EF:0E:4D:44:54:FF:3A:1F:3D:F5:02:A4:E8
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f6:49:e7:7d:fd:26:7b:43:72:48:01:d2:b2:1f:d7:0c:e1:
97:b9:22:b2:64:4c:1b:8a:56:2c:d2:4e:38:40:b8:7f:59:3e:
2c:84:94:91:15:a1:cc:7e:f8:df:7a:ce:60:6a:cc:62:9b:64:
f9:32:b2:b2:e5:69:0a:84:67:44:df:22:a5:8b:32:71:a8:09:
3e:93:58:25:2f:24:54:2d:88:23:fa:a9:57:82:e0:24:b7:cc:
47:d6:64:73:0e:bf:29:81:38:a1:b4:57:d1:07:30:5e:db:b9:
7f:0e:53:bd:d1:fe:fc:b4:de:76:0d:9c:b5:9c:2a:6d:c0:ee:
09:a9:2b:d1:7f:71:05:68:71:11:a7:ec:4c:6c:4e:b7:7b:53:
a5:c9:5f:ed:4d:8c:f5:b4:a1:7a:fd:1b:73:cc:35:0d:c5:f4:
dd:1c:af:38:2b:18:95:4b:1d:87:c0:11:3b:e4:d8:28:f0:2c:
7b:29:66:4c:e6:8a:fa:62:a5:23:a3:eb:b6:a4:b3:20:8f:cb:
37:a4:06:2e:71:e6:0e:19:10:e4:61:73:16:bd:14:07:29:a0:
b3:a9:b1:7a:6f:9a:57:5e:84:fc:39:71:77:94:d2:f7:a7:e5:
b6:21:f4:2d:f0:c9:05:49:8d:71:19:a1:bf:74:92:f0:f2:21:
9c:a4:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:32 2025 by rpki-client