Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: lyI2R3aAIIfv6t4Twr3EvwheuD41EzGIotje156da7A=
Subject key identifier: 12:82:62:1D:18:E6:7B:E4:78:1E:57:6B:3D:B0:4C:0E:64:D6:1A:93
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 0199FB459168A342064755098809B85D19E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0CE1
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: PzSlYpay+85f/Y0Kq28zd0A/LTgK8Fq/zA5Kh1vDqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:91:68:a3:42:06:47:55:09:88:09:b8:5d:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=1282621d18e67be4781e576b3db04c0e64d61a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:f7:80:cb:d2:6a:96:88:dd:51:ae:98:3d:
8e:0f:71:76:b0:7f:67:bd:76:84:fc:aa:e6:42:b5:
ee:ab:c8:af:4a:7d:23:c5:0e:49:8e:2e:b3:46:2c:
35:bf:40:c0:41:cc:45:11:e4:eb:12:fb:1c:a2:00:
cd:80:36:18:5c:8c:fe:3b:64:9c:2c:b2:6d:56:49:
54:af:07:de:30:e3:92:ff:7a:17:77:15:aa:8e:0b:
53:c2:cb:0c:12:b4:ad:19:06:46:c3:17:3e:20:d6:
17:30:d8:5a:49:c8:88:dc:5c:58:15:3c:91:5c:74:
85:96:02:ee:9c:1e:dd:9e:ea:38:0d:9e:f1:0f:47:
30:fe:13:95:8b:36:00:96:0f:dd:66:ec:e4:8f:5c:
16:84:9a:49:74:f3:f4:c9:72:a3:4e:f9:9e:6f:71:
02:24:3a:9f:98:f4:6e:e3:3c:8c:fe:5e:0e:1c:ff:
ce:a9:a8:cb:f1:34:31:05:cd:b2:b8:0a:9f:39:8b:
e8:37:50:09:a5:46:73:62:ca:45:e5:bf:bf:58:32:
e2:0b:47:8e:24:85:7f:89:f0:c9:b2:af:41:d5:4a:
1a:b1:7a:38:9d:9b:ed:de:7b:6f:71:0e:90:4c:8d:
ab:27:0c:15:64:a5:17:47:e0:aa:d5:91:03:5c:ad:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:62:1D:18:E6:7B:E4:78:1E:57:6B:3D:B0:4C:0E:64:D6:1A:93
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:18:63:08:16:29:92:fd:c4:af:25:37:59:e6:7a:dc:b1:f2:
eb:b5:49:c1:f0:5a:dd:29:d5:4f:03:c2:b2:67:7d:8d:b4:fa:
d6:06:d3:ba:1e:9e:e3:32:72:97:8f:f5:86:58:b6:fe:5e:6f:
c9:8c:0b:03:95:c2:bc:33:88:c5:bd:27:f9:26:bb:6b:63:e7:
c4:82:b6:a4:56:fd:37:1c:12:47:48:35:1e:a5:13:7a:a6:0b:
18:f8:f4:61:4c:b5:97:03:6e:00:0c:cd:cd:ca:5a:12:ed:0c:
c2:10:4a:b2:1d:01:1d:88:ed:53:36:00:27:e9:ac:24:68:de:
6e:7f:b6:1b:49:94:0f:ce:5a:a7:51:90:80:49:82:5f:87:d6:
23:cb:4b:7e:34:45:e9:98:2e:b3:71:4e:14:13:45:72:1e:b2:
38:7e:e7:15:3f:cd:f4:5e:fb:30:96:90:6a:d9:9f:49:6a:e7:
a9:87:a6:95:a2:97:a5:1b:70:a2:0d:50:5b:c3:ce:dc:b0:17:
3b:7c:97:53:13:2c:9d:6b:3b:21:2c:95:32:e9:14:16:97:d0:
86:e0:b0:f9:c1:ba:6f:42:b5:47:c8:81:4a:72:1a:4f:d2:d8:
4e:f9:7d:29:c6:70:57:ba:61:c9:4f:fb:b2:73:a2:df:1e:24:
db:46:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:48 2025 by rpki-client