Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: CNNEkB+fbWzdputSOJMlrY3LVEco8bYHWPGsskgT9Lg=
Subject key identifier: C8:59:89:F5:33:EB:41:DF:C9:59:A3:55:4B:B7:49:CC:8D:AB:A9:2C
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0199FB7CEAE991371654B9BBBFCFADE2F1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: k3dm7GmejQ62cWLf1RUTBeqgt7xt53mvK61cq6OEsM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ea:e9:91:37:16:54:b9:bb:bf:cf:ad:e2:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=c85989f533eb41dfc959a3554bb749cc8daba92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b8:9a:b0:7d:81:84:e1:50:21:53:27:9c:a7:
07:9a:b1:3a:45:0c:12:72:fc:2d:01:62:10:aa:e0:
12:27:84:a5:20:d5:df:05:0c:b1:5d:14:a9:d6:65:
1b:96:34:47:b7:4f:94:cd:3d:af:7a:45:42:5f:4b:
15:5f:f6:35:f2:4c:ec:ab:dc:5c:98:54:4e:87:27:
ea:21:5a:88:c7:99:6f:c4:03:0c:9a:bd:5c:00:42:
74:1a:55:22:bc:42:8e:c1:6d:cc:8e:b7:b4:20:f6:
43:07:4e:b1:15:11:04:69:0d:8c:96:02:2b:c7:8c:
10:e6:eb:85:cf:f1:a6:be:d6:2e:85:01:17:1a:9a:
7c:29:3d:f0:37:a0:7e:8f:52:8a:02:70:4a:70:29:
10:a5:57:d8:7a:a3:f6:ea:f4:df:68:8a:d8:ba:95:
80:06:3f:87:70:bf:c1:53:f4:c9:22:3e:aa:46:1e:
e2:05:32:f4:c6:ca:c8:99:f8:65:cd:fa:b2:ca:33:
a7:e7:61:7a:58:3c:7c:d4:24:47:c9:78:13:69:f1:
e7:ed:d4:97:8d:ce:b0:7b:d0:27:07:6a:b3:8f:e8:
6d:3d:1b:6a:ec:59:0d:f2:5a:70:bd:69:de:fd:d8:
dc:9c:12:a4:fc:14:3d:e5:41:5c:88:77:00:b5:76:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:89:F5:33:EB:41:DF:C9:59:A3:55:4B:B7:49:CC:8D:AB:A9:2C
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1f:1b:7d:5e:13:a2:c3:ec:26:fe:3a:05:bc:68:d6:68:79:
71:27:b9:ac:ef:e7:eb:5e:d4:18:4f:b0:0e:03:2c:28:fc:1c:
1a:45:dc:3b:10:ac:19:bb:d4:2a:56:47:36:ae:1b:dc:ba:6a:
ee:b7:8b:61:6e:64:e7:7d:4f:8b:0a:e5:04:2f:be:87:17:55:
b6:3f:3f:bb:27:1c:96:a1:cb:9d:2c:bb:95:87:9b:fe:54:be:
15:e4:a1:c6:27:f1:3b:6c:55:6a:82:8f:33:14:28:e0:f6:54:
06:df:11:1c:4c:e0:a3:15:43:a6:49:86:44:43:07:fd:41:a4:
2a:74:dd:c7:66:9f:9f:e0:44:c7:ad:0c:46:da:55:c8:0a:62:
2b:f7:fe:ec:2c:41:c7:f2:9b:d0:0d:1e:2e:d1:7a:79:68:5d:
f4:e3:78:48:b7:e5:5d:d9:37:62:34:f9:b5:45:a8:c5:8c:15:
65:fe:a0:6a:41:75:f0:ca:27:b1:9c:71:1b:75:4d:48:63:ee:
d6:62:6d:44:61:81:0f:49:73:d3:29:81:49:63:08:70:b5:21:
ac:d1:a6:3d:c4:5b:fc:2c:3a:d0:96:35:19:59:31:12:9a:b0:
69:23:a0:34:dd:a5:13:0b:43:26:a8:7b:52:81:06:a3:3e:51:
91:0f:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:43 2025 by rpki-client