Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: /byZYl2A8AmQX6R771V85Cyb7Zq5zpaBgPMkeYsX0dw=
Subject key identifier: AB:36:59:BE:C9:1B:EB:50:E4:44:3D:F1:B1:86:09:5B:2B:18:B9:3C
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 0199FD6B6A14F6F49BCC1CE1BC77A24CF045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0C45
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: YAPU5qZFSHjmE5hcW76r/HHj6jVRiPLUfqcp86WnuUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6a:14:f6:f4:9b:cc:1c:e1:bc:77:a2:4c:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=ab3659bec91beb50e4443df1b186095b2b18b93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:ef:82:1f:1d:2b:a5:44:93:02:12:d3:a4:
4c:66:be:d7:27:05:84:5f:4d:3f:22:96:72:28:25:
76:71:95:91:2a:0e:59:ac:30:b5:e6:96:f4:b6:df:
b8:45:7e:89:64:3f:dd:93:ae:0a:21:3c:de:bb:4a:
45:75:28:b5:65:6d:30:bc:cf:ff:10:b3:78:9a:6e:
a5:f9:65:28:9f:9f:aa:48:6d:2d:27:d9:4b:4f:2a:
c3:48:be:9c:c8:31:05:2d:c2:a0:eb:be:11:ef:e0:
1d:43:46:3e:ac:17:f0:33:2e:3b:19:9f:36:fc:7d:
fb:74:c3:2f:f4:b0:5d:bc:1a:62:79:8d:78:48:56:
f4:a4:a1:d4:2c:c2:30:a7:97:78:b8:ed:eb:b0:00:
e8:55:36:5d:30:8c:af:8f:2c:12:e0:2d:0a:91:53:
9c:40:53:7f:8d:84:c9:da:08:64:8e:c5:f3:56:02:
15:b6:e0:e3:24:5c:88:5c:f8:63:13:d1:45:fe:20:
7a:27:6c:d6:57:e8:bb:1a:d8:b4:fa:a1:7f:5b:55:
d4:85:60:14:f3:43:45:17:78:f3:a4:78:8a:37:a5:
d9:aa:38:d7:b4:ff:90:7e:8d:e7:cb:12:70:1d:4f:
54:3d:a4:f7:67:5e:9d:92:3f:6e:04:6c:a7:1d:95:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:59:BE:C9:1B:EB:50:E4:44:3D:F1:B1:86:09:5B:2B:18:B9:3C
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:57:74:5f:f2:b4:5e:3a:31:be:ce:34:8c:6b:a9:da:7d:
52:bc:58:76:b9:62:25:c9:f9:1a:1b:70:f6:37:42:5e:fc:bb:
f9:ad:86:a7:4d:1c:2d:cd:5a:f2:c2:73:b5:eb:20:e6:a7:2c:
e5:b2:1d:55:ba:3c:54:ef:2a:9a:f0:1c:7d:4f:58:1f:b6:72:
bb:44:58:27:b2:ea:e9:c2:42:fc:38:5a:1f:6d:a6:e1:7c:be:
18:09:6e:eb:1c:d1:67:d7:1b:ba:0a:a5:69:a0:64:c2:a1:3a:
8f:f5:74:e9:6c:6d:f4:5a:56:a5:df:fa:61:9d:79:46:30:96:
ee:ef:94:34:3a:c1:af:82:09:58:3e:6d:3d:81:f8:30:fb:a9:
83:53:c4:bb:33:4e:1a:a2:90:9d:f3:c4:08:f3:90:11:05:97:
f2:10:25:8d:2e:a3:4a:bf:bc:60:49:cc:d7:c9:8d:f9:e7:46:
3d:02:e1:8b:aa:f5:8d:60:23:f3:29:94:cd:f2:03:a3:2b:13:
3e:14:b3:06:0a:51:35:f6:4e:86:e5:ac:f8:c8:8c:2a:a1:26:
dc:bc:47:c6:41:0a:09:4f:eb:bc:48:71:2c:9d:5e:89:ff:70:
4f:db:b8:d9:f2:97:ce:f8:9d:d9:90:9e:9c:97:ae:b4:98:94:
48:05:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:03 2025 by rpki-client