Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: aUki3nHpzgQ6PmcKthPXKYN4XasenDUHQD0ava2+yag=
Subject key identifier: DE:AF:83:D6:98:15:91:7E:FC:17:E2:88:AA:2E:66:BD:8E:FC:77:E6
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 0199FBEB7A7930CE776000844F9BAA3B3DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 0560
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (hash: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: gIvd6aY/oVw6Qgv45FNT8zr7EsMa73+/F2GPtAnPdvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:79:30:ce:77:60:00:84:4f:9b:aa:3b:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=deaf83d69815917efc17e288aa2e66bd8efc77e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:0f:54:1b:af:31:c1:0b:72:a4:9d:1b:70:
ad:c9:51:8c:5f:80:e4:49:c9:de:f3:07:d8:aa:b1:
74:9b:51:94:44:9b:2d:78:bc:48:10:e0:ad:39:19:
d7:3d:58:d7:8b:e5:9e:cd:32:84:d1:ff:31:09:e4:
eb:e6:cd:f7:68:c6:d4:ce:23:92:4e:40:6e:67:51:
a9:a0:75:f8:95:16:b1:a1:69:57:99:a8:e7:35:07:
b6:b6:1c:28:af:04:d0:db:54:5d:45:a5:8b:f9:3c:
d4:05:b5:64:05:84:8a:fe:af:e1:4a:1e:32:91:95:
46:3c:70:a7:4d:6c:bd:25:d2:0c:d5:f2:8d:2b:bd:
57:a6:1f:fd:d4:27:a6:f0:77:06:2c:c5:9e:86:3e:
a3:47:61:14:ce:d2:ad:6e:6e:6f:a9:4f:77:e6:c4:
bf:5f:f3:02:a6:3e:bd:60:eb:23:df:ba:57:ce:e6:
a6:8d:82:b1:42:21:5f:3c:d4:0c:91:fb:ff:9a:40:
e0:58:2f:ee:ec:8b:c6:c6:b5:77:0e:f0:15:be:71:
63:82:06:8e:5c:b8:ea:34:a6:2d:7a:86:11:29:97:
ea:48:99:50:be:5a:4e:1e:dc:07:36:56:f6:9c:3b:
c2:a5:bc:41:02:66:48:db:b4:4e:b4:5e:62:61:d0:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:83:D6:98:15:91:7E:FC:17:E2:88:AA:2E:66:BD:8E:FC:77:E6
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:be:c4:ed:d9:4a:f8:47:d3:13:e5:a8:e1:55:78:06:4a:2c:
a9:c2:f7:0d:44:b3:5e:2d:88:8d:a3:35:28:32:ae:4c:1e:b1:
d8:ff:5c:65:8a:1b:31:a9:21:35:4b:9f:7d:62:ba:ac:b8:c4:
cb:12:a5:ce:10:95:20:da:47:01:d5:8e:cb:09:d5:d9:a9:b8:
4c:3b:49:92:18:49:84:84:4b:e1:1c:eb:f2:de:39:2c:c1:f4:
88:2a:44:fa:d6:bd:e1:73:f1:72:bb:fb:06:6e:c3:ce:d9:af:
88:2d:3b:78:72:50:ae:fa:17:d1:10:61:42:82:79:80:4a:b5:
d6:42:79:83:7e:d3:27:21:65:e7:29:5b:0d:32:a6:23:1a:28:
74:c4:f9:a5:91:f2:e6:49:e3:cb:c1:97:94:c7:48:7c:6f:7d:
38:9b:69:cf:7c:49:ff:2f:6d:a0:03:a4:89:f1:7f:b8:95:ba:
25:26:b0:6d:36:50:5f:04:45:71:3f:29:16:92:8b:69:71:0b:
24:64:59:10:bf:5f:52:6b:a3:d1:99:2a:6a:11:03:81:7a:4f:
58:7d:df:56:4e:bd:fe:41:99:67:6e:e6:99:e1:d7:5b:63:33:
c7:9d:b2:f6:32:a6:9f:91:33:89:ff:5e:18:ad:d1:08:60:9f:
55:65:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client