Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier: sTvWaGZc2t7+pOk1fmG3u4I5PNvqysde1UK7HrvTUi8=
Subject key identifier: CC:0E:05:82:80:64:C6:B3:28:02:50:54:06:72:1A:3A:1D:2F:02:CE
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 0199FE7DFC76B3DBBA557D789FD7CE79AFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number: 029E
Signing time: Sun 19 Oct 2025 22:01:33 +0000
Manifest this update: Sun 19 Oct 2025 22:01:33 +0000
Manifest next update: Mon 20 Oct 2025 22:01:33 +0000
Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: 7d5EDLeeE/GCguj8a00koHVvZvlM0dSHW0xGbi8w0Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:fc:76:b3:db:ba:55:7d:78:9f:d7:ce:79:af:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Oct 19 22:01:33 2025 GMT
Not After : Oct 20 22:01:33 2025 GMT
Subject: CN=cc0e05828064c6b32802505406721a3a1d2f02ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:64:ad:9a:9a:ee:af:07:12:fe:2f:fc:1f:
07:93:c1:0e:85:43:ea:79:af:8e:df:7a:b5:57:6a:
87:56:81:1a:fc:36:3f:63:4b:27:e8:91:69:d6:81:
84:37:33:57:96:67:47:c8:d3:82:fd:ae:3f:7d:0b:
22:cb:30:95:51:44:ed:31:de:82:a5:6f:d2:2e:a2:
9d:90:6f:1a:fd:d5:21:0c:7d:3a:7f:1c:cf:9c:a8:
78:c3:37:4f:22:c6:c9:f5:0b:63:1e:c8:8e:13:ff:
d7:36:98:c2:0b:30:78:89:4f:73:e1:d0:ee:16:0f:
f9:32:ae:40:41:12:34:27:bd:33:65:a7:14:8a:3b:
b4:99:d1:9c:10:2f:86:ec:c2:2b:76:fb:e5:e3:87:
b3:89:a8:90:96:55:f9:fd:c0:29:ed:9a:5d:8c:ad:
d5:0b:a1:36:b5:3c:50:da:1a:9e:3c:93:7e:bf:be:
d3:c4:00:02:90:40:dd:ad:e2:71:26:71:82:3c:55:
32:c6:7c:89:45:ff:16:c4:a6:fe:9e:25:70:b4:c8:
72:f9:9d:a5:1e:fd:d2:5f:af:17:df:dd:71:9d:a6:
19:1d:13:bd:8c:21:03:ab:fc:39:10:f0:c8:45:06:
cb:85:5d:2a:74:87:7f:0d:a2:9b:9f:60:34:5c:1b:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:05:82:80:64:C6:B3:28:02:50:54:06:72:1A:3A:1D:2F:02:CE
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4d:ea:09:24:2d:a4:e6:3d:b5:1b:ac:b1:43:ce:9c:61:c1:
85:9f:bb:9b:b4:ea:b9:71:67:a6:45:55:75:c8:96:3f:04:b6:
ef:2a:a4:00:fa:b9:cc:78:44:cc:a1:c7:a2:a4:5a:89:d9:dc:
ed:bb:a5:f4:3e:99:13:27:f1:c8:ec:5f:40:c5:d1:94:7b:e8:
90:0e:5d:02:1d:9e:2b:f0:42:9d:9d:f9:2e:0e:13:a6:93:d3:
82:33:ee:55:c7:4b:71:44:73:50:6f:e2:fd:6f:7f:dc:7e:d9:
b3:20:d0:8f:25:b0:9f:4f:68:db:33:90:cb:a2:06:80:5b:30:
92:e7:64:98:2e:37:4e:5a:6c:7f:23:4d:68:41:28:12:a8:00:
fa:ed:9d:60:31:74:9e:91:51:2f:4b:62:24:08:65:a7:35:7d:
1e:43:16:61:dd:00:a1:1b:b9:9b:92:51:2c:9b:c6:f8:fd:11:
d1:9e:6e:7e:a5:0d:02:49:b2:80:40:a2:8f:0b:e7:b4:c7:1b:
c6:ad:fb:17:ac:d2:57:16:d4:91:6c:c5:54:5e:0a:68:e1:3d:
0c:09:c0:6d:46:22:a1:33:8a:33:c6:0e:96:5b:b9:ef:2c:f7:
bc:ec:38:cb:30:b8:da:7f:27:0f:0f:7c:d2:24:55:8e:60:af:
50:3e:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:56 2025 by rpki-client