Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: HrUHAllRW0xrEpnaiPR3ROmC4ylhehpYgvnyaCwax/4=
Subject key identifier: 0F:1B:55:AB:10:7D:74:3B:31:BB:3D:02:BA:54:21:2C:B2:FC:77:6E
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019A4DE1CF164F92C46789513B094826DF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0DF9
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: 4J3rVa7WSLYXEFwlIoscltIn0nuvdhxtB3vKaWfdPtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cf:16:4f:92:c4:67:89:51:3b:09:48:26:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=0f1b55ab107d743b31bb3d02ba54212cb2fc776e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:bd:ba:81:6c:71:6f:2c:5a:41:ee:1d:cd:
67:f7:23:2b:74:ae:f2:6d:35:81:d7:16:a3:dc:b2:
8e:b3:bd:35:39:cb:22:12:7b:16:06:52:0b:7d:77:
86:b1:75:b2:3a:52:33:fd:c9:11:a5:28:1b:42:d4:
20:33:a7:86:2a:2e:c9:e4:ba:64:1a:13:4b:70:7d:
3d:3f:3d:50:33:fe:01:36:c5:dc:09:74:b2:af:34:
4c:fc:be:15:aa:ae:51:d3:4a:8a:77:2c:6b:19:1b:
c2:19:66:9c:d3:81:8b:bf:6f:ba:44:1b:13:ba:f3:
ca:cd:ea:5f:d8:d2:02:a8:14:d3:52:68:23:fe:77:
e0:14:03:13:5f:86:b6:e4:a8:d3:eb:de:49:4d:a8:
c4:78:64:f8:4e:28:38:04:46:1e:a3:af:a8:c7:65:
8f:47:9e:ae:0e:5e:4c:72:b6:68:e2:0d:ba:04:11:
85:99:87:81:26:ed:39:13:62:12:58:ca:e1:34:5a:
cd:76:88:7c:32:84:8d:7b:2e:db:18:a9:dc:f6:04:
d3:0a:ba:df:b0:d8:8e:b7:ac:0d:00:e6:59:44:1c:
42:bb:50:c3:d4:9a:0d:12:1d:d2:9d:5b:31:96:73:
d2:90:27:b8:65:b9:9c:7f:7e:d9:27:7f:ea:87:31:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:55:AB:10:7D:74:3B:31:BB:3D:02:BA:54:21:2C:B2:FC:77:6E
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:50:19:63:26:c5:ca:a8:98:a1:b1:14:76:40:b8:be:21:ca:
60:86:d8:2f:e6:d6:a5:2c:b1:a2:47:ad:60:53:14:73:00:62:
1d:f5:3a:b6:08:32:eb:67:10:c5:fb:25:b5:26:2a:09:33:e6:
c0:9e:0b:58:2b:a6:9a:f7:29:8c:a4:07:67:f7:20:f9:f6:50:
e5:8c:ba:af:1d:ea:3e:1b:af:be:e8:d1:d8:a3:64:48:7f:a3:
ea:6a:25:72:03:5f:51:b5:62:72:9b:2a:0e:0d:f4:b1:ea:69:
b6:60:0a:37:49:8f:16:dc:46:34:1f:ed:1f:67:d2:7b:af:38:
10:9e:cf:7e:b4:62:90:ca:6b:52:88:c6:fd:27:2c:c0:de:70:
70:63:70:15:18:d5:60:03:72:f1:b2:59:15:e7:d2:53:55:23:
36:d8:83:9d:d1:a7:54:e6:4b:14:6c:c2:1a:5e:f3:5b:99:3f:
80:c8:51:c9:28:20:6d:f8:b8:dc:51:8c:52:38:04:ec:76:e1:
5e:38:4f:1f:e0:7f:8d:63:42:90:a6:ec:c6:27:15:85:f4:cb:
9b:22:7e:8e:10:16:a0:e8:be:90:ca:82:f5:89:9d:7e:fd:cb:
f7:6e:e3:6c:a0:63:88:ab:53:ae:cb:c7:78:e6:f4:e4:6a:c0:
90:17:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:55 2025 by rpki-client