Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: tdETGjEmppoLL7P1KMK34PSyx7HioFNDUlpjNUHrGkM=
Subject key identifier: F5:61:D2:15:A0:85:94:21:28:68:79:6A:51:1B:0F:19:C3:0D:1D:D4
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 0199FBEB35216D80529091C1F5BDE44F6ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1644
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: KxOcK+EV/Kd+sTtBj3DYQ11cZ8rFMH9P+DajeTJbDcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:35:21:6d:80:52:90:91:c1:f5:bd:e4:4f:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=f561d215a08594212868796a511b0f19c30d1dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:d0:eb:2d:07:61:a3:a4:17:a1:46:fd:56:
63:2e:b1:23:66:e3:b0:5e:a8:09:c6:8a:87:15:90:
62:ee:bb:e3:6e:e5:16:20:72:7b:1f:50:ed:d6:74:
95:10:79:c9:07:60:6b:51:36:ee:0b:85:45:9d:f4:
0d:33:04:1c:59:df:60:84:05:83:99:53:f1:01:2e:
df:f0:b0:42:bf:6f:fd:44:bd:fd:32:50:b7:2c:40:
ac:db:21:f6:16:86:59:ad:c8:82:86:bb:da:5c:1f:
ab:18:96:9d:5e:2c:6f:66:d5:62:98:20:61:36:c5:
8a:23:dc:c3:01:13:91:fc:50:43:94:7c:6d:39:4c:
3d:62:48:b3:ab:8b:1d:c9:97:49:83:2b:2d:e7:07:
86:ea:e6:eb:6c:b6:2e:63:9e:a1:54:1e:9e:3a:1c:
fb:9b:29:07:0e:af:f4:4e:6c:3e:72:dd:65:3a:cf:
1b:29:25:8b:7d:ad:4a:39:6c:69:f6:64:2a:15:4a:
4a:67:b4:47:61:b9:7e:55:2b:02:5b:cc:ca:33:84:
51:f3:67:92:58:05:0e:cf:7e:84:37:67:78:f7:46:
94:ab:b6:25:d6:55:dd:68:18:db:07:98:58:e0:60:
9f:fe:60:53:96:79:52:ec:8e:e5:de:38:b7:17:05:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:D2:15:A0:85:94:21:28:68:79:6A:51:1B:0F:19:C3:0D:1D:D4
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8f:35:87:7e:e1:b3:97:b2:4c:14:73:39:b7:77:ae:58:e3:
2e:91:a2:5d:f9:2a:5a:96:0a:5a:33:3d:e4:e2:dc:ab:43:68:
87:90:9f:dd:17:a2:a3:6f:51:c2:94:83:08:b5:04:58:ca:26:
16:8a:d8:fc:39:45:ea:96:be:73:e2:f8:1a:34:98:28:31:1e:
6b:f2:d3:cd:27:9e:8d:93:16:41:71:ef:06:c5:eb:77:b7:84:
56:4d:2f:30:ee:13:df:1c:bf:fd:c5:82:b6:34:ab:89:a4:72:
25:72:67:dd:38:d7:0f:bc:8f:f2:7a:81:53:dd:9f:10:95:ec:
2d:2d:26:a2:9e:b8:a4:2e:1c:e6:ca:a1:11:c6:49:08:f5:6f:
cc:b7:8d:50:0d:84:7b:90:3c:53:db:b2:15:4b:1c:0b:0a:63:
8d:18:d0:61:68:d4:87:1e:5b:65:17:0d:08:c0:79:ea:e1:5d:
7c:07:83:2a:68:83:1c:64:35:53:9f:db:93:02:fd:25:50:2c:
48:a4:46:10:7c:85:8b:e8:e2:d7:3c:fc:47:3d:f8:47:a3:76:
fa:36:37:6d:f1:87:44:b3:8e:d0:88:42:aa:3e:44:36:ea:49:
bf:67:62:5f:c3:89:03:bd:9d:cd:c2:f2:33:09:0d:23:cc:98:
44:40:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:16 2025 by rpki-client