Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: iI3lwmJKj4vtl6pXOf+5rvec7Vwha0vOPjdGOO7En9A=
Subject key identifier: 7A:7C:62:43:EC:02:14:4C:EF:E6:60:4F:97:60:0F:C6:0F:90:BA:4D
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 0199FE46BB84C532D259C5362E7EB576089A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 1019
Signing time: Sun 19 Oct 2025 21:01:12 +0000
Manifest this update: Sun 19 Oct 2025 21:01:12 +0000
Manifest next update: Mon 20 Oct 2025 21:01:12 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: Td1VkGDAJNfBFQls3pAdXCU31OXlkM5ZTlzz2NUmjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bb:84:c5:32:d2:59:c5:36:2e:7e:b5:76:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Oct 19 21:01:12 2025 GMT
Not After : Oct 20 21:01:12 2025 GMT
Subject: CN=7a7c6243ec02144cefe6604f97600fc60f90ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:28:ce:83:47:48:45:2b:ae:41:86:98:7b:
02:e0:be:c7:ad:29:29:8b:80:9f:c5:03:55:57:b6:
b0:f7:7c:c1:76:c0:c5:c1:96:11:bd:62:3d:05:10:
d1:c7:26:6d:0e:54:b2:52:b9:dc:06:0a:9d:a7:3f:
33:90:49:73:04:b5:5e:40:dc:8c:c7:87:22:99:c6:
a4:fd:b4:8a:8a:62:7c:4e:73:9b:fd:3c:6a:92:f1:
2d:b9:55:b8:60:49:78:b7:1e:fe:8b:9f:94:a3:f4:
90:7c:01:19:10:f4:69:21:ac:bd:cb:c5:60:38:7c:
39:b0:b7:9c:ec:9c:b4:cd:42:05:84:26:9d:2b:22:
34:eb:1a:0c:89:0a:68:ff:94:e1:ae:c2:a3:ee:e0:
9e:2c:e4:5a:71:81:95:51:3c:c3:f5:78:90:0c:03:
79:97:09:a1:c4:c6:41:8b:6d:5d:73:aa:fd:30:49:
79:44:9d:92:6b:14:96:17:64:08:e8:4c:60:c6:7c:
1c:78:56:27:6a:41:dc:70:3c:c8:5c:e4:02:4e:92:
ca:17:bd:53:b3:8e:6a:a3:9a:89:89:b8:3c:58:84:
de:e3:cd:7f:85:e1:27:bd:36:26:d0:4e:b7:b4:60:
99:91:fb:7c:7a:35:89:d2:62:76:dd:03:13:85:d4:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:62:43:EC:02:14:4C:EF:E6:60:4F:97:60:0F:C6:0F:90:BA:4D
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cd:d0:85:7a:8c:a7:e4:3d:79:6f:90:94:0d:d6:8a:cc:5b:
9d:72:8b:1d:fe:09:ea:84:df:59:13:3e:93:72:83:ac:f4:11:
81:77:fe:44:57:fb:f7:32:5b:00:3c:28:f1:08:62:0d:6c:72:
aa:ca:59:10:a3:33:b2:49:2d:09:36:78:d4:ca:9e:ca:6a:3e:
3e:3b:a9:ac:c5:9e:29:e7:99:51:70:0d:67:0f:81:50:98:9f:
d2:db:58:3d:8f:b3:57:d7:91:d5:12:bf:e4:5a:5c:80:39:46:
dd:41:dd:22:c9:52:ad:da:b1:2d:cd:c2:03:ab:7f:08:d5:f2:
e9:db:c8:37:c4:a1:8a:42:e2:7c:a9:7d:95:ce:95:37:1c:a5:
30:4b:76:ff:62:39:f3:c0:30:27:57:ba:9d:62:e6:24:aa:a0:
be:cf:e5:e9:7d:36:20:54:e5:a5:77:e5:10:0d:a7:ad:9e:28:
71:ec:53:ad:08:54:59:f8:59:da:6f:1a:9e:95:2e:1f:33:5a:
47:07:fe:9c:0e:70:0f:dc:fa:66:f6:99:53:60:91:ab:8b:65:
e6:2b:bb:10:c8:d7:fb:1d:46:aa:f8:f4:5d:aa:a3:b2:0f:9a:
fc:3c:36:6e:6a:e5:9b:23:e3:ac:02:0b:06:3b:8b:5a:90:8e:
d9:0b:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:34 2025 by rpki-client