Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: oQ+rFaTNOdnqSZCdWSNBC2iLB0BMuBk5fqlDpBhu2EQ=
Subject key identifier: 8D:63:83:6B:A7:F1:F8:C4:60:82:60:B0:AF:69:A6:FF:87:49:B7:9B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0199FF228ED1556E543D4ED8BCFF43B09233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 01:01:18 +0000
Manifest this update: Mon 20 Oct 2025 01:01:18 +0000
Manifest next update: Tue 21 Oct 2025 01:01:18 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: d8xwDWX72+bKAOKlP6H31Dk08sMtLAarhzGn0YaaR00=)
8: xAgFfQaKEowdS70V9zbgoKMLSaw.roa (hash: hfLCxfCTfbaf8X5vKcrUM1lSCKQfVXa2EeKuQXwH66I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8e:d1:55:6e:54:3d:4e:d8:bc:ff:43:b0:92:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Oct 20 01:01:18 2025 GMT
Not After : Oct 21 01:01:18 2025 GMT
Subject: CN=8d63836ba7f1f8c4608260b0af69a6ff8749b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:71:7c:32:b5:b0:9c:0c:53:3c:8c:78:8b:
1d:84:20:37:83:f9:ac:c6:b6:13:d7:b4:2e:65:61:
2b:7a:9a:b0:f3:d6:37:4c:15:bf:00:c2:98:ce:48:
49:f2:1f:96:61:61:cc:2d:c5:cb:a5:25:a9:82:73:
9a:45:d0:c1:c8:36:13:31:39:7a:c3:a2:aa:e0:04:
7a:64:3c:8a:33:b0:4a:2c:3a:f6:0e:01:fe:b3:86:
97:9a:0f:2e:d7:43:29:b1:a6:42:cf:10:c4:15:77:
a5:ae:c6:07:63:01:1c:fb:5d:e5:2b:50:31:12:e0:
88:1a:57:7f:2a:0d:4d:ab:bd:dc:f9:f8:82:e7:83:
26:02:b8:c2:1d:1f:58:9e:9f:4c:a7:0e:87:bf:c3:
8a:75:f6:d3:99:e2:5d:fa:5c:f6:d4:a3:ed:d8:b2:
f4:4e:e4:15:5d:fd:4b:3b:46:33:bc:61:37:85:8e:
39:d3:b2:35:08:38:9e:1e:d6:3e:9e:af:89:9d:39:
44:4c:b3:49:65:3b:78:ed:37:be:16:8a:2f:84:87:
2e:85:f1:87:8c:3f:a5:25:fe:33:be:87:56:26:38:
93:ec:a7:ce:87:3b:6d:f9:10:73:e9:96:ea:35:ee:
44:22:56:74:9f:b9:ae:20:72:1c:12:49:8d:b4:d4:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:83:6B:A7:F1:F8:C4:60:82:60:B0:AF:69:A6:FF:87:49:B7:9B
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:93:8e:81:cc:df:4d:fe:28:03:d8:8f:0b:c7:43:e3:c6:
b1:9e:19:f1:cb:70:63:0b:98:73:86:a6:78:b2:54:de:15:4b:
d0:50:4c:81:13:9c:8e:a7:2a:d6:d6:f3:35:47:3d:e1:9c:1d:
31:7c:dc:d4:23:91:f9:e0:08:e5:15:41:c6:fe:0f:85:96:ef:
07:bd:b6:41:df:7d:72:bf:db:b9:46:bd:09:41:d3:04:0c:39:
c1:09:aa:ef:b6:6f:cc:d9:3f:fd:c8:25:3d:31:db:aa:d1:dd:
7d:76:a5:cc:31:a3:99:38:1c:9c:33:aa:ac:d3:11:b2:eb:a5:
00:ff:f6:9d:1f:c0:c6:ed:30:78:c9:aa:f5:7b:2e:8d:ab:a5:
f3:87:03:37:53:1d:62:dc:c6:1c:9c:78:f9:a2:8f:e3:72:ad:
4f:80:dd:af:e8:3b:ee:81:07:07:81:dd:87:37:68:e9:99:9e:
01:33:90:c9:28:90:cb:30:84:97:a3:43:e4:5b:da:75:fa:99:
51:06:74:42:7a:ac:21:89:f3:78:c0:1d:d0:e8:7c:57:f0:1d:
e1:82:14:e1:ee:2a:81:30:d6:71:7b:ed:b1:ab:ca:9a:5a:25:
22:76:a0:d4:c4:6a:d7:01:86:f1:12:93:43:b1:43:41:83:8e:
90:ec:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:09:45 2025 by rpki-client