Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: UBn87rbJLIWTYLf9c6dkxHCNg4RYa8QBznNdGQFvXxY=
Subject key identifier: F0:5C:EF:16:05:45:86:B0:65:52:EC:BC:9F:B1:AD:99:4A:BD:D3:EC
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019A533F2D34D8B3C347326B4FBC4D24BB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0106
Signing time: Wed 05 Nov 2025 09:00:40 +0000
Manifest this update: Wed 05 Nov 2025 09:00:40 +0000
Manifest next update: Thu 06 Nov 2025 09:00:40 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: jyu0QayZHun1qPz99MuRbK3BQA9b/KVj6J9CX5jBJx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:2d:34:d8:b3:c3:47:32:6b:4f:bc:4d:24:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Nov 5 09:00:40 2025 GMT
Not After : Nov 6 09:00:40 2025 GMT
Subject: CN=f05cef16054586b06552ecbc9fb1ad994abdd3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:8e:11:fb:a7:85:ba:5a:2f:b4:17:b3:e0:
94:b3:18:db:42:36:af:03:2a:42:c6:d6:c9:a6:12:
ab:87:6a:c2:18:33:ec:cd:db:a4:3c:60:bb:3e:ca:
2d:e5:28:2c:19:c7:1f:a9:9b:e8:22:d9:6b:f3:eb:
6e:42:bb:ac:51:c2:fe:bc:7f:d4:5a:cc:85:c6:51:
f5:46:c8:06:f9:02:cb:8a:5a:b3:eb:56:95:4f:b8:
72:12:30:8c:31:24:79:80:fd:e8:2e:1c:94:37:40:
8c:82:30:65:17:d7:08:fd:80:a8:7f:1e:7b:13:b7:
81:b0:e6:5d:bd:ab:ab:79:91:43:ba:ea:0a:a7:f2:
97:15:53:35:a9:d7:55:9b:29:d6:28:a1:eb:52:b2:
39:a6:82:d9:d7:ba:68:18:fc:18:f3:ab:fa:02:7c:
63:5c:e4:a6:4c:de:81:57:92:2b:32:7b:f0:60:d3:
ba:e0:a6:5a:10:eb:2b:13:91:03:94:a5:b7:ce:8c:
47:84:f1:4d:9c:6b:ae:bf:b5:19:78:65:c3:09:25:
87:01:e5:19:b7:ac:c4:9b:3d:2a:e0:be:9e:19:bc:
cd:84:4f:af:9e:5d:a5:32:20:34:b1:f4:26:62:c2:
95:59:33:66:5a:66:20:18:9c:79:e6:22:0c:e8:50:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:EF:16:05:45:86:B0:65:52:EC:BC:9F:B1:AD:99:4A:BD:D3:EC
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:41:8d:2f:37:7a:98:87:ce:f6:1e:35:bd:a2:75:3a:be:5e:
bc:87:bd:96:eb:f5:ad:f7:ea:3b:a7:d4:e9:f7:39:46:cd:0d:
b2:2f:6d:bd:41:fd:e0:4b:2b:98:39:fa:4c:b0:af:29:2e:07:
f7:9f:be:21:9b:63:34:58:ab:fa:01:e7:31:9e:5b:12:9a:4c:
df:2a:a9:31:66:d2:c7:59:07:9f:6d:02:5d:84:aa:66:65:c1:
a6:b5:39:49:b5:fb:db:e8:06:d1:63:d9:ed:1b:42:3e:a5:95:
0c:05:11:5b:da:48:1e:aa:c5:99:f4:58:4c:16:4c:fc:58:14:
8a:6d:4f:77:45:39:19:4d:bb:a0:78:c3:33:74:81:b5:0e:4f:
60:61:c5:8f:39:ec:bc:18:5a:1e:0c:12:d2:ff:1d:1c:8f:a2:
4d:f9:84:65:e7:49:d8:56:69:60:e4:b5:35:6f:60:1e:aa:98:
a7:d3:58:ff:c0:6e:6c:d3:47:37:a7:44:d1:99:93:1d:d7:d4:
ad:e9:80:f3:26:2f:8b:8b:1c:29:c4:4b:67:38:69:b9:a1:39:
bf:8f:22:5f:05:14:87:3d:f9:bb:b3:ff:27:8d:43:76:07:c5:
d2:71:6e:56:1e:c7:22:91:73:b9:a5:e9:b6:22:31:f3:f4:32:
80:6c:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:37:45 2025 by rpki-client