Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: CMcDb7S0zYKZ9ogyUbtlLRxcYlPxW1N3h/D/Lk0qAa4=
Subject key identifier: BA:80:DB:4D:D6:54:7E:B6:28:06:FD:1F:24:F2:B4:F5:FB:B6:A7:7D
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 019A02906CDBE4ABAB9C8299C2F720519BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 06B0
Signing time: Mon 20 Oct 2025 17:00:10 +0000
Manifest this update: Mon 20 Oct 2025 17:00:10 +0000
Manifest next update: Tue 21 Oct 2025 17:00:10 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: Nsh9O6ddwfbhf3wx1/JB4xz5CBFiBwFwtcrlplalCYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:6c:db:e4:ab:ab:9c:82:99:c2:f7:20:51:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Oct 20 17:00:10 2025 GMT
Not After : Oct 21 17:00:10 2025 GMT
Subject: CN=ba80db4dd6547eb62806fd1f24f2b4f5fbb6a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:27:38:f0:aa:95:2f:1d:c0:66:31:b8:b3:
69:96:d5:85:35:1c:fd:85:26:97:2f:f2:3d:3c:46:
b3:4c:fb:0a:08:fd:ed:e7:c3:76:56:8d:ed:fa:fc:
1d:73:b3:34:2b:cc:8f:cf:c9:00:fa:a3:35:8a:17:
9f:aa:de:f9:99:62:45:b2:dc:f0:68:eb:2f:54:86:
49:f8:c9:f5:4e:df:82:39:8a:3f:55:55:de:7f:8a:
91:21:e4:ee:4d:21:1d:07:5a:f5:af:7d:f7:ac:d0:
9b:84:71:60:91:b6:7e:fd:a4:64:ff:8a:d5:44:19:
5c:aa:df:4c:1b:5e:5a:fa:4a:6e:f0:52:8f:93:74:
6f:db:93:67:ed:74:7c:e3:bf:ca:a1:93:21:61:50:
c5:fd:e0:16:b4:d6:12:d5:c2:70:37:8e:41:70:cb:
68:16:1b:b7:32:9c:e4:66:df:b9:ea:15:da:42:71:
27:bf:33:b6:f4:1a:69:53:7e:4d:54:8e:75:0c:d1:
8a:4f:cb:9c:d7:97:91:d5:47:60:41:e7:44:fd:53:
a9:8e:77:d8:86:d7:a3:87:a2:ca:13:db:ce:67:52:
68:b4:8c:e8:d5:8b:1f:3c:ac:a2:6f:31:08:fe:49:
94:25:35:61:a5:86:fc:ea:f6:7f:4e:b5:3a:15:90:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:DB:4D:D6:54:7E:B6:28:06:FD:1F:24:F2:B4:F5:FB:B6:A7:7D
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:01:48:f1:9e:e7:8e:1c:ab:86:56:70:01:12:7e:e3:77:
15:38:19:6c:66:aa:29:42:1d:94:2c:c0:b9:70:2c:d4:85:83:
ff:52:8e:df:f9:7a:8d:ad:da:15:d4:4c:06:a2:68:f3:9f:96:
83:47:af:e5:28:6d:fc:a7:ae:fd:40:a6:9a:65:5a:79:be:c1:
34:d5:df:6a:62:5f:a5:9c:11:70:19:da:21:94:68:68:94:e6:
04:23:6c:7e:a6:69:98:4d:84:f3:aa:e1:bd:64:9f:d3:54:b6:
9a:33:bd:7d:45:03:2d:33:e2:1e:8f:ec:99:54:2c:22:40:94:
54:67:39:2e:db:30:d5:93:bc:a7:c6:8c:43:1d:bd:4e:6e:1e:
53:4d:68:e9:f2:a4:9d:b0:a0:ee:9b:6e:1c:57:f7:4a:99:1b:
01:dc:b9:c6:6f:ad:80:e3:3b:21:ba:1f:1b:cc:69:66:33:06:
27:44:ef:71:75:ab:13:cb:af:df:7d:f0:04:0a:4f:80:f2:6a:
64:6d:13:54:5c:2f:d6:36:7c:67:f8:62:0c:23:aa:85:dd:93:
70:ea:4a:80:74:0d:77:db:7b:69:fb:5e:33:7c:33:a4:bf:cc:
8c:20:5e:6e:dd:10:b5:68:80:34:3e:db:ff:f9:56:0c:ed:27:
a6:b4:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:18 2025 by rpki-client