Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: fTjNWSKYtnuhbqeV582tv5Lxlmx07UO683nLrFBuRTE=
Subject key identifier: C3:93:37:57:00:BC:09:85:96:3A:51:2A:31:F0:0B:A6:B6:9F:6A:1A
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019A5451EB1E1A07CABF59E137AE1DE823B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 14:00:45 +0000
Manifest this update: Wed 05 Nov 2025 14:00:45 +0000
Manifest next update: Thu 06 Nov 2025 14:00:45 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: Z1nqQnc1bg4j5pbjdpNicDffgGuRgjyjmfBpp08s804=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:eb:1e:1a:07:ca:bf:59:e1:37:ae:1d:e8:23:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Nov 5 14:00:45 2025 GMT
Not After : Nov 6 14:00:45 2025 GMT
Subject: CN=c393375700bc0985963a512a31f00ba6b69f6a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:90:f8:0b:98:dc:dd:9e:97:e9:07:5d:f0:
a8:92:c1:47:e1:cd:6d:5b:62:d0:10:a4:4c:5a:6b:
2e:37:3d:e4:27:39:9c:60:71:20:58:4b:cb:1a:47:
30:f7:46:04:11:da:81:1c:c9:7c:8c:74:78:00:c7:
12:65:cb:7a:60:a6:08:bd:4c:5d:35:02:31:27:31:
3e:90:48:10:ac:75:5d:fb:e6:6d:e9:c2:90:54:96:
d6:d0:84:a8:37:0c:12:95:1a:9f:d8:d1:b2:da:7b:
d2:0a:8f:ea:02:d2:05:96:ae:3a:2e:62:8a:da:75:
9c:31:86:c5:c4:a4:e8:d4:b3:97:ef:8b:b1:9a:cb:
61:a8:66:b7:f3:7f:5f:a4:46:31:2a:8c:be:fe:7d:
5d:dc:d1:83:14:85:b4:5e:d0:ee:9e:30:16:2e:4e:
37:6c:6a:67:19:04:88:39:07:f1:53:10:13:76:47:
eb:ce:cf:33:ec:05:a7:ae:02:b0:35:23:e2:83:4f:
80:16:8d:a7:15:5c:9a:7b:ce:e2:64:c3:96:89:6c:
b0:bf:0e:3c:ab:57:71:3f:49:18:f3:07:49:7b:11:
00:7d:6b:aa:db:e8:d2:3d:91:bf:ca:25:61:93:e3:
17:b3:c4:4a:60:3f:af:0d:25:fa:48:b2:78:be:c6:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:37:57:00:BC:09:85:96:3A:51:2A:31:F0:0B:A6:B6:9F:6A:1A
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:fe:49:5e:62:00:a3:84:c1:be:5b:27:da:95:57:a1:83:
ed:f9:f2:11:5d:2c:79:9f:f0:60:36:78:36:5c:43:95:51:4d:
d3:e2:75:81:67:15:0c:4b:32:1e:8b:cc:4a:5c:da:85:c2:40:
b5:44:7d:32:cf:1c:73:2e:31:26:2e:05:66:43:51:98:85:e8:
96:24:b3:c4:84:9c:c2:4b:49:04:37:92:ce:98:c7:68:a5:a7:
d5:f0:5a:a8:79:89:c5:0e:fe:82:1a:91:6d:d9:80:d4:36:a4:
84:f2:7b:31:1d:39:12:8a:be:3b:54:03:9b:f8:5a:2c:bf:49:
ce:e4:71:bd:93:81:ca:7d:53:65:4f:c1:54:5c:df:07:4e:81:
aa:e9:93:d3:76:e1:f6:7c:30:2c:2d:13:ed:e7:62:94:6e:3c:
36:cc:2e:f6:cb:a7:01:de:70:07:cc:41:f5:e4:3a:9b:e1:71:
e6:d6:87:63:3f:52:73:fa:8d:89:6c:5a:d4:6e:88:73:6b:bb:
02:4e:82:2d:d5:7e:db:a6:3c:82:04:bf:4d:8e:93:c5:ff:24:
a2:fa:f7:f0:01:af:ce:c0:22:37:e2:84:ac:d5:47:28:6f:f0:
8e:3f:dd:d3:5d:89:62:92:30:6b:ab:bc:4a:7e:9c:1a:eb:e7:
5a:d4:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:53 2025 by rpki-client