Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File: xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier: Bwo9tkZ0sJZQQ1H5n37IhKwsxWo+uKMuZ8hrrqS134w=
Subject key identifier: 94:FA:B1:4B:9A:AF:A2:29:D1:A0:A2:AA:E9:36:01:F3:B9:90:F7:D5
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 019A4DE1E9FBFA13AAEC5134ED45D9EC9100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number: 0CBD
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: dxX6Ti3aWleuStaWraXr4frz_Vc.roa (hash: 9TFe9RK9UFo1A/A9wWB7oP8/UKvwVNCCx5PAodMGlCE=)
2: um3HBZkaueSxb2_7foyvqiLtq1o.roa (hash: ldqFzPeRJ5eKPCRvhriUNm3ZQxrok0WxTabyy5e+vUE=)
3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: z2fSg0ddhu+BJVqufyl2m29sU8WZZrO/dzdkrw87B78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e9:fb:fa:13:aa:ec:51:34:ed:45:d9:ec:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=94fab14b9aafa229d1a0a2aae93601f3b990f7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b0:8a:3a:45:53:a6:10:55:ba:c8:16:c1:13:
2d:a1:5d:63:dd:52:88:9c:c0:ac:62:09:03:ac:56:
53:2f:f7:89:bd:03:92:e1:ad:34:9c:25:b6:3c:e6:
41:b9:75:61:c0:66:71:7f:65:71:79:e5:fe:a2:1d:
f0:d3:ab:3f:85:4d:2a:31:f5:9f:19:a1:7b:2c:68:
97:f1:de:4e:cb:11:ef:33:41:af:0a:4b:2b:ff:ad:
a4:55:b6:2d:a5:cd:e4:63:2b:24:9f:38:2b:c2:5d:
75:97:23:b4:8f:07:97:35:b1:69:14:fc:41:e3:58:
24:58:00:95:bc:e7:62:03:3d:f1:0e:7e:36:ec:48:
0d:32:be:12:f4:58:17:4f:f0:9e:1e:dc:56:e7:93:
97:b8:74:e1:06:27:09:de:4d:6a:9b:25:78:98:75:
99:9a:7d:37:72:a1:c5:17:43:85:a4:f7:b3:2e:74:
46:11:fb:fd:5d:ae:97:bd:e3:1d:1e:89:f2:3b:d8:
f7:42:bc:8f:8d:7d:42:93:fb:fd:43:63:a9:35:f2:
d9:69:fb:62:a8:0a:9e:91:62:60:c7:d4:b8:00:f5:
8b:39:90:7d:63:5a:5f:85:ba:f8:e1:b4:ce:fe:80:
c8:c9:c2:59:c1:fb:15:da:f8:80:d4:76:2b:0f:15:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:B1:4B:9A:AF:A2:29:D1:A0:A2:AA:E9:36:01:F3:B9:90:F7:D5
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d7:83:88:28:67:07:5a:65:cb:64:e5:2e:80:8c:f2:60:38:
f0:05:82:8b:88:bb:e3:7f:00:2b:cd:7e:26:2a:be:32:f4:8a:
5e:92:f1:08:17:a6:ff:25:79:e7:5d:ca:c9:84:8e:4a:39:ba:
09:fc:1c:67:57:64:3e:58:8d:1a:29:a8:a9:3d:bc:a7:ae:f8:
f4:1e:80:ad:f9:36:96:9b:95:ac:a9:cf:4b:e3:42:68:b5:d3:
1a:3d:b1:7d:cf:78:86:2b:ee:0c:5f:43:a2:85:d7:29:81:6b:
84:0a:b8:a9:4e:2a:df:c0:24:d5:13:e8:9f:20:30:7b:3e:0f:
2b:57:08:b1:54:df:d4:fb:b8:61:4d:4d:3c:78:54:ad:ed:38:
c9:2c:fd:d4:06:b5:60:e2:83:78:61:98:7b:bb:b2:1b:71:aa:
cb:c1:90:07:21:2a:61:93:cf:1a:a0:00:75:85:77:f0:0e:cc:
d2:f1:c6:12:21:8b:87:28:b3:33:50:5c:08:42:66:d0:8e:a5:
77:d2:c2:5f:f9:0d:64:ed:47:37:a1:2d:03:2e:d8:0f:d0:da:
37:3e:11:5e:3d:1d:ca:4e:c7:8a:9c:89:c5:fd:c3:51:af:bb:
14:7b:29:d7:a7:af:49:91:53:50:f9:2d:f8:06:ee:e8:82:0a:
d4:52:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:46 2025 by rpki-client