Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: MCxaD59x2uGy6NqHW065ctjIuq3oh20BETf6QXNtL/4=
Subject key identifier: CD:6E:27:DB:0D:3E:C8:B1:30:01:AD:34:90:24:0A:3C:BC:D2:EB:AD
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019A5150FF318C9213F32F2341B3BE492B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0C82
Signing time: Wed 05 Nov 2025 00:00:53 +0000
Manifest this update: Wed 05 Nov 2025 00:00:53 +0000
Manifest next update: Thu 06 Nov 2025 00:00:53 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: 95IOKO3F0PPKrdfGASW6+fXoC7pRq9+10fVI1n84irM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ff:31:8c:92:13:f3:2f:23:41:b3:be:49:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Nov 5 00:00:53 2025 GMT
Not After : Nov 6 00:00:53 2025 GMT
Subject: CN=cd6e27db0d3ec8b13001ad3490240a3cbcd2ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:b4:95:54:10:19:4d:ae:76:dc:5d:d1:f7:
4c:15:d4:c9:2f:df:d9:6a:c6:33:15:84:be:62:51:
65:a1:0b:78:4c:3e:cc:0e:22:6d:5f:ed:e9:68:ce:
24:9c:d9:be:39:b3:2e:75:ed:33:f2:02:4c:ea:bd:
ec:90:c4:16:b0:97:8f:8c:a3:6b:98:ca:0e:78:46:
4e:f9:1d:a6:46:cc:40:96:9d:ba:84:d8:3e:56:ce:
39:aa:f1:e9:5f:a5:9f:9c:90:b7:f6:b5:35:f0:bb:
0d:9f:5a:2f:a9:60:90:24:16:e1:bd:32:00:54:0d:
94:b5:d4:68:cd:69:96:e8:76:b2:83:9c:81:14:5e:
36:b2:1a:9d:82:fb:2b:6f:32:d4:ec:a7:95:dc:41:
dc:14:09:e6:5d:35:8d:c6:79:be:f7:17:bd:6f:80:
5e:0c:3f:07:53:a5:d6:67:7a:67:ff:ed:e9:ab:f3:
32:5a:74:36:59:b6:8f:6b:17:d1:21:f2:8d:e8:42:
f2:07:08:05:a7:69:9a:18:b8:25:6c:05:94:15:b4:
28:69:f8:b8:6e:b5:0b:8d:bb:0f:de:49:e1:e3:6a:
71:5a:ab:41:8f:01:53:9a:90:07:f0:6b:15:a1:13:
0f:4d:4f:d0:c9:a8:ee:9e:5f:c0:25:c0:1a:c7:d0:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:27:DB:0D:3E:C8:B1:30:01:AD:34:90:24:0A:3C:BC:D2:EB:AD
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:c2:93:09:d3:5b:c6:5e:ea:08:8e:a9:48:07:b6:e0:5b:
ed:9d:24:61:3f:8e:fa:98:fa:8b:c7:55:bf:df:47:a2:00:55:
bd:af:ff:59:2a:a3:9c:b7:7d:70:5f:9f:c0:d5:a0:23:38:04:
a4:5e:13:67:f3:5a:73:86:45:2a:56:95:8c:58:42:7d:63:b3:
a0:e3:e8:14:f2:b2:31:e9:63:72:08:0b:25:96:48:49:ff:9c:
4b:36:f3:0a:77:08:70:60:23:46:76:95:30:48:88:82:c3:e0:
69:d0:0b:cb:5b:39:18:ba:6e:a2:eb:b3:8d:f5:4b:01:b1:98:
29:0f:f3:2f:e9:88:18:f9:dd:24:d3:0f:b0:94:1a:13:90:77:
fc:d5:ae:54:75:79:62:0b:4e:87:d7:b1:dc:9a:c5:4e:70:01:
1c:a7:04:32:11:04:4d:81:c7:e9:e3:d8:69:5a:e7:86:61:9c:
95:3e:99:d7:37:92:f2:cd:68:5b:7a:26:78:5a:88:ef:bb:e3:
5f:22:8c:d0:25:b3:3d:7c:eb:76:18:82:ae:01:cc:23:47:26:
80:f8:29:4e:9b:c0:df:77:c0:73:eb:5a:fd:74:dd:db:4b:6f:
a2:c5:3c:d0:fd:cc:ef:f0:b8:f1:fd:0b:a1:24:ae:b9:4a:d2:
24:f6:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:06 2025 by rpki-client