Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: 5/om3myWxw8SPO3ahRBFdez1wSwoU3TdLw9qvGgLsyE=
Subject key identifier: FD:6B:E9:3F:A7:96:6D:DB:D6:52:B3:FA:BE:CA:91:D8:C9:2C:0C:89
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019A4DE1DF94F8D002ADB1A71FE8EEFE081F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: wxxP0Vk8LC9DHPBp0vpwFMRpL1bq5CTpf9bf7yvtFl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:df:94:f8:d0:02:ad:b1:a7:1f:e8:ee:fe:08:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=fd6be93fa7966ddbd652b3fabeca91d8c92c0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:20:8c:14:56:d3:cb:a1:58:07:32:cd:75:
1c:03:39:0c:d4:94:60:a6:77:39:1b:bb:65:f0:0e:
88:9c:57:ea:2b:c6:b1:ec:7c:9c:3c:52:3a:8a:e9:
00:94:8d:05:91:f1:f5:65:d2:5f:58:8f:1e:11:b9:
2a:60:6e:01:70:f1:17:ee:3c:09:6f:71:5a:19:e7:
57:7d:a2:55:b0:5c:f6:a8:60:cc:58:bf:76:a2:d0:
e4:e9:7a:45:fc:4f:03:93:6c:18:96:59:d1:03:43:
5e:68:61:02:e0:b0:6a:b0:d9:2a:93:ad:66:ca:cc:
5b:c9:b6:f4:57:26:ed:74:b8:cf:93:e5:18:e1:d2:
51:44:bc:a6:ef:c3:c5:b1:b2:51:0a:a8:ad:e7:f7:
fd:d5:d9:65:7b:d2:bf:12:17:d6:d9:cf:7d:3a:11:
a6:19:a4:5c:65:9a:48:1e:61:66:d1:eb:66:06:08:
75:79:ee:20:6b:b1:f9:58:70:fd:52:d2:78:84:a3:
18:82:17:bd:7f:ce:e1:47:cf:03:49:34:8c:69:cd:
60:22:54:91:5b:ab:bc:88:00:2d:48:34:9f:9e:b5:
ab:d6:b5:6b:b5:ac:2b:93:93:46:bc:1e:e7:0a:b3:
63:f9:60:6a:cd:cb:c7:26:b0:e0:29:cf:55:08:08:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:E9:3F:A7:96:6D:DB:D6:52:B3:FA:BE:CA:91:D8:C9:2C:0C:89
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:c8:7c:6c:8c:86:5e:34:af:17:1e:58:1c:56:bf:76:47:
52:9c:88:50:9f:e3:9f:32:a7:34:52:11:71:6a:d5:d9:e5:3d:
ce:a3:81:ee:7f:0b:16:02:d7:8a:13:4f:a0:e8:3f:df:fa:5c:
05:07:b6:57:e8:c0:a4:c0:7b:4a:fc:70:fd:87:2a:f4:a9:7b:
51:53:e3:8e:ea:af:88:52:e8:39:4b:ed:e8:41:2c:d9:49:8b:
a1:7e:6a:fa:30:73:70:a6:57:99:43:a5:fc:06:6b:4a:8c:d2:
b3:5c:57:8d:5b:a5:de:71:c6:7b:78:b6:c8:20:75:84:bb:59:
db:01:aa:81:b1:aa:4e:28:2f:bf:50:7c:90:41:75:07:e5:5d:
06:96:80:d4:ca:96:98:ad:1a:77:0e:78:f3:c9:bf:a1:e1:19:
e3:4f:c5:ab:d3:ca:69:ce:c8:5a:fd:fd:5b:6a:37:27:03:e0:
22:57:47:76:e9:ad:85:a7:46:41:36:2b:2e:0f:7a:86:3b:51:
05:83:a0:7f:f0:5e:ab:78:c3:4a:7a:a4:79:ee:92:5d:99:90:
ed:4a:57:d5:f0:2b:8d:a0:68:0e:e8:0f:de:65:a7:dc:a5:bd:
be:c8:6a:e9:91:e1:bb:1d:ab:c9:88:31:3b:b8:2a:fa:d9:2a:
25:e0:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:20 2025 by rpki-client