Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: v8OAcWwIyL2nzZuas7kExYnrT6YQmcWcJsSLoJo2C5A=
Subject key identifier: 74:6B:10:45:83:AB:D6:6B:AF:27:D0:F7:4F:3E:98:BC:7C:89:DA:66
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 0199FD6AF8E3949A55D63AF909FB6E57EC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 02F6
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: duv4en-kEZVnVXOXNGPZW_Jyrcw.roa (hash: /NQGSNT25LxwGXN6iIBj1hB3qklD/ePBBcZOp63AVyY=)
2: vCCb_HMH6KGFfsqbXQ0TIng1tfU.roa (hash: Twx8fVXaunI4+UsiQLUlLfwUCYQ1G7itZPYouG+NOxY=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: HaDnJ5qzzl8/nLkwrR7D0NcDR7tBy+C+Uw1o1d+jPaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f8:e3:94:9a:55:d6:3a:f9:09:fb:6e:57:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=746b104583abd66baf27d0f74f3e98bc7c89da66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:61:33:c6:7a:ea:f3:5a:c7:8d:3e:bb:e1:
bc:3b:47:10:ce:1b:b5:fc:e3:60:fc:64:fd:3d:4b:
7d:10:01:79:36:b4:10:14:f7:d9:d2:4f:1e:f9:6a:
8d:36:78:37:5c:e3:8c:6a:cd:63:66:84:18:1e:65:
6f:e9:1c:72:c3:08:4d:9f:d4:00:f9:40:d7:b5:c7:
36:2f:55:c7:54:40:41:ba:ec:c8:9d:36:50:e9:fd:
de:e2:6f:43:b1:46:b2:bd:1b:57:e9:44:33:af:12:
84:fc:f8:28:ff:1b:4a:88:2b:e7:b3:72:3c:69:68:
69:ef:40:6a:29:dd:ab:84:52:5a:bc:5b:9c:dc:47:
d7:b3:91:91:a1:e0:a0:eb:d7:b3:9c:48:7d:ef:59:
c7:2f:5f:56:5b:09:64:06:45:d0:e5:96:e5:af:f8:
a7:ec:a7:40:ad:62:79:06:47:05:72:b5:57:d3:c7:
c0:da:be:29:a3:c9:d5:dc:71:80:77:2d:68:32:12:
a0:c7:d3:74:92:32:cb:46:bd:52:65:cf:90:23:86:
da:30:f3:11:30:b0:3e:19:ed:a3:29:ab:8e:54:45:
87:32:03:ad:11:8d:b3:ce:b6:5f:c0:89:03:9d:4a:
b3:b0:dd:60:bf:2b:da:a6:fc:36:e2:4d:8b:07:13:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6B:10:45:83:AB:D6:6B:AF:27:D0:F7:4F:3E:98:BC:7C:89:DA:66
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:f5:e1:9b:2f:ec:07:41:13:eb:db:32:a0:71:99:f2:6d:
a6:da:8f:20:65:49:02:f5:07:04:3e:89:bc:7a:09:8a:c2:07:
41:42:1b:96:6d:51:c3:a6:a1:76:a3:25:5f:15:8a:53:9d:48:
f4:86:17:be:2a:0b:81:74:6e:f9:cf:91:34:f5:20:00:c5:d6:
33:9a:dc:cb:7e:ea:7a:c0:65:c6:29:57:02:d7:74:63:20:7e:
e0:d4:1f:46:90:dd:a9:c0:3b:a2:2e:7f:c4:7f:d6:6c:05:00:
31:08:77:67:7b:88:8a:8d:04:cc:f0:48:4b:72:15:78:e4:72:
0a:c8:31:92:f3:76:22:07:c5:61:dd:d2:d9:21:95:e0:96:58:
2e:f7:88:ae:75:7f:c5:23:61:06:c6:49:71:a2:d1:01:4e:2f:
55:d1:b7:fb:95:be:34:3c:b9:f8:bf:76:ce:92:df:41:b2:25:
d4:bb:a0:47:4a:e6:f6:13:8e:88:8b:19:b5:0b:38:7b:fe:44:
77:fd:ba:ad:f6:b3:ff:02:f9:6b:31:a1:6e:20:ec:85:6c:7a:
9e:e9:97:99:44:e5:9a:bc:b9:ab:6f:07:fe:04:61:eb:36:b1:
0b:4b:85:41:3a:a8:ea:c3:0b:67:55:3a:07:d2:76:46:cc:cc:
b6:45:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:00 2025 by rpki-client