Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: YNkRP2H9Dzn049LAkMOEGs1t4eafkFXFMobez+TeeuE=
Subject key identifier: 38:EF:DD:A5:23:39:59:6A:C9:89:DC:FC:CC:3F:7F:AA:84:FA:CA:94
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 0199FBEBA25A185820A621DCDC4F43CBFA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: An4cav29ZmyrQ7oos0AolSwLSGQjNg/x48b/Eqf2/hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a2:5a:18:58:20:a6:21:dc:dc:4f:43:cb:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=38efdda52339596ac989dcfccc3f7faa84faca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:9d:e4:f3:4c:ae:56:d3:38:29:9e:c9:87:
46:2a:02:36:11:7d:ad:aa:f3:92:4b:0b:33:e0:60:
ba:38:58:63:0e:dc:78:14:02:55:34:07:bf:5a:71:
52:c3:91:78:6f:63:a2:ff:a5:26:26:45:db:f3:63:
4c:ec:74:62:69:d2:55:44:31:a4:fd:91:cc:82:4d:
62:f8:39:27:03:fb:0a:1c:9d:ed:a4:3b:b1:af:be:
7b:ae:4b:71:3a:89:af:91:2b:15:24:70:83:b3:e8:
d6:38:ff:43:7e:05:64:85:96:ae:ca:ca:e2:0a:c9:
50:c3:d3:05:09:e8:79:a0:98:e1:54:27:ac:27:7d:
88:06:2c:9b:86:22:76:bc:9d:c9:01:9e:66:ce:23:
cc:3e:a5:35:c5:38:e0:a0:ad:c3:cd:4f:50:62:a1:
49:76:36:7f:e7:de:29:bd:57:75:c0:2d:6a:10:3f:
33:6b:26:03:d1:72:92:d2:30:ce:18:89:f2:98:4c:
95:b3:ab:0f:35:42:2f:c0:ec:e7:95:3d:87:2f:f4:
8c:08:ce:a5:a7:86:80:df:cd:4b:62:d9:8f:91:e6:
f0:2d:7f:eb:38:c6:b5:38:47:8b:a7:1e:a6:8c:1d:
97:f4:ff:e8:ad:9a:f0:a6:d7:f7:ab:71:f2:a5:1f:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:DD:A5:23:39:59:6A:C9:89:DC:FC:CC:3F:7F:AA:84:FA:CA:94
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:df:7a:aa:d1:bd:d5:81:58:b0:a4:0a:c8:30:c3:28:d5:
b0:a8:0f:c3:13:95:ca:a4:aa:f6:2c:da:63:04:23:11:96:47:
54:6c:92:6e:af:06:b0:5f:b5:02:12:22:d8:75:2e:e6:83:9c:
d1:3c:91:fc:fb:3d:0c:13:e1:53:f9:9b:db:95:6a:5f:b3:18:
ef:26:c8:5e:6d:28:c7:c6:ed:ea:0c:e9:43:3a:a0:5d:3d:53:
80:b2:60:dd:77:70:c1:4f:17:77:f5:05:2c:bd:c1:df:d6:8a:
c3:d0:c8:1b:ea:ea:ec:04:5d:ec:71:7d:ed:79:17:e3:40:03:
0f:8d:65:f3:c1:39:9d:da:26:2c:be:ed:f8:65:05:fc:a7:c1:
cc:50:68:26:d2:6e:b6:3a:11:8c:7b:4c:ca:e6:af:45:61:06:
e6:02:a1:a4:04:2a:e9:c7:f0:a0:d7:bf:80:20:43:65:94:f2:
39:a0:8d:8b:30:01:d4:8f:8f:92:54:d4:6e:b1:82:e4:3e:3d:
10:ea:03:4e:e2:14:5d:22:4e:79:52:4e:0a:dc:e1:b9:f7:c7:
69:67:5a:09:fb:61:54:f9:a8:dc:b6:5b:36:e9:af:24:1f:0e:
ed:6d:4e:f9:55:07:4f:72:9e:f1:f8:10:fa:2f:88:62:44:e1:
3c:43:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client