Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: x+sDYZjBK9rsNzqtDHkSG5XR11borbAEx0D+u2Xyldw=
Subject key identifier: B9:50:7D:0C:5E:F9:D7:80:FA:E7:7D:D9:B3:B2:2C:7F:35:34:70:AE
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019A247919EEA3A4C29D945496C2CEA9ED25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1659
Signing time: Mon 27 Oct 2025 07:01:47 +0000
Manifest this update: Mon 27 Oct 2025 07:01:47 +0000
Manifest next update: Tue 28 Oct 2025 07:01:47 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: vu1DsTRE3o4UnhvqhfmiAIoTC1LvwKboOB3Tt1+rO88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:19:ee:a3:a4:c2:9d:94:54:96:c2:ce:a9:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Oct 27 07:01:47 2025 GMT
Not After : Oct 28 07:01:47 2025 GMT
Subject: CN=b9507d0c5ef9d780fae77dd9b3b22c7f353470ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:5e:3a:f5:40:de:56:db:45:66:4a:74:c2:
03:d7:01:48:87:f1:e6:6d:d9:c5:87:00:8b:28:ae:
d2:27:ef:ed:d2:e4:e0:7d:e4:57:9c:af:6e:96:15:
5b:a5:33:f3:6e:99:1e:4b:63:72:b9:2f:67:e6:63:
03:70:5d:aa:65:a1:9f:14:f8:93:03:fd:80:2f:80:
4a:95:ec:59:34:a2:c3:93:18:07:53:a5:f5:eb:9c:
6f:0e:70:ed:57:ef:16:9f:e0:d3:fa:6d:17:73:98:
b0:b3:f2:94:d6:4a:6f:f7:9e:b2:6b:29:83:eb:2b:
b5:22:9c:04:f2:c5:91:41:6c:57:74:6a:89:4e:f7:
8e:51:d8:99:6c:c2:a8:ff:8c:9d:8d:6e:a1:77:39:
7a:31:68:80:db:a9:d6:af:8a:24:65:03:e8:50:80:
b7:70:96:d9:f6:59:36:b6:e3:82:17:23:4a:86:c0:
83:f2:01:a0:4c:5e:1c:35:aa:92:0b:10:ae:5d:7a:
b0:c4:24:51:7f:68:95:c9:89:93:e5:c5:db:22:72:
4a:e0:02:2f:b7:a3:28:5f:11:2f:a4:a9:dc:5b:ae:
de:ce:0f:ce:58:86:5a:13:1e:68:b5:e1:b4:be:82:
21:b9:07:52:c5:56:e6:27:f0:46:03:a4:03:4c:df:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:7D:0C:5E:F9:D7:80:FA:E7:7D:D9:B3:B2:2C:7F:35:34:70:AE
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:92:d0:45:74:31:e3:f9:02:62:02:fb:23:3f:43:f2:d0:
3f:3e:3f:11:58:3d:96:ac:d4:21:b5:db:f6:63:2e:96:61:53:
0f:fc:de:b1:bc:98:1d:2f:b7:65:e9:a2:72:74:10:7b:46:7e:
36:c3:fb:22:91:85:5c:92:38:3e:13:73:86:c3:02:64:77:9f:
c8:82:81:8e:b4:1a:3a:40:f1:e8:2f:b4:31:0b:87:29:ef:37:
f9:05:03:44:12:cf:80:d4:04:3c:2b:18:cf:1f:68:a6:c5:f0:
53:49:f9:90:c6:20:83:5e:e1:e6:0e:8c:11:8e:bf:ca:a4:6e:
b4:3c:07:61:f6:20:89:4d:68:3a:b7:f0:f0:67:95:1e:2a:ed:
26:ea:63:fd:10:d1:72:b2:48:5b:b9:75:5d:15:55:f8:2d:50:
b5:c9:10:ca:51:26:0c:2a:9b:2f:81:55:02:ac:9f:db:9c:81:
c6:93:c7:47:c7:d0:e8:97:e8:29:f0:d2:89:70:db:43:ab:e9:
73:45:00:f9:81:8b:93:71:7d:b7:ea:c8:05:6f:d2:f3:ed:43:
b3:0c:e8:8b:0c:60:3d:3c:9a:cb:c3:a1:a6:47:79:0f:ad:31:
8b:9c:07:68:6b:b8:9f:a8:19:bd:bb:49:42:22:10:8b:61:df:
c0:c3:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:48:14 2025 by rpki-client