Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier: MDILqMtPIABRYOz/YsWCC8PtV8MKEGItckJGx8/Fu5c=
Subject key identifier: 55:4C:9A:F3:B6:88:0D:C7:FF:7F:23:40:80:3C:FE:48:77:BA:94:01
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial: 019A1BAC04A97F611867828DDCB61D878F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 14:00:49 +0000
Manifest this update: Sat 25 Oct 2025 14:00:49 +0000
Manifest next update: Sun 26 Oct 2025 14:00:49 +0000
Files and hashes: 1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=)
2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: XptLa24hxoJAmObeRzy9msBDW6tC0iqiJH3TVRsxhqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:04:a9:7f:61:18:67:82:8d:dc:b6:1d:87:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Validity
Not Before: Oct 25 14:00:49 2025 GMT
Not After : Oct 26 14:00:49 2025 GMT
Subject: CN=554c9af3b6880dc7ff7f2340803cfe4877ba9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:fc:e1:d5:1e:46:4a:b7:46:e0:54:3a:98:
ec:9f:2a:b7:e9:19:84:ce:63:98:6d:52:62:a5:78:
26:bb:57:02:f5:71:63:f7:a7:f9:bb:87:28:b7:0e:
1f:a7:8c:33:8a:75:d7:66:95:28:41:37:ad:06:8c:
54:32:2e:1f:1f:b7:d2:9b:52:5e:35:a8:61:c9:84:
57:d8:30:41:d5:40:2c:e0:4f:82:af:86:ec:cd:d8:
f2:fd:56:36:d2:06:ed:01:db:78:fa:cc:b4:4c:f0:
20:fd:1a:f8:c0:08:46:89:9c:e9:e3:ef:6c:38:9d:
3e:45:e4:a3:33:73:ee:a1:ec:7f:22:af:65:d1:a0:
2e:2d:0f:51:06:e8:6e:4b:30:71:c6:05:5f:61:49:
f4:20:44:2a:94:6d:55:27:72:f1:a7:26:0b:47:5e:
06:f1:5f:76:0e:75:e5:9d:01:f7:1e:7d:1a:b4:80:
cc:14:a8:9a:26:6f:4f:6d:9d:e1:04:8d:4c:37:a6:
8a:fb:96:2a:d3:cc:66:d3:e5:23:e9:9e:f8:c3:b9:
77:72:ec:68:b1:ef:ca:9d:fc:d3:9e:f4:b9:49:d9:
b0:32:16:04:aa:97:48:02:e6:51:2f:2c:ba:18:be:
23:f8:d2:04:a3:a0:9f:ac:8a:cf:cf:3d:13:0b:b0:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:9A:F3:B6:88:0D:C7:FF:7F:23:40:80:3C:FE:48:77:BA:94:01
X509v3 Authority Key Identifier:
keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:88:3e:3b:de:bc:8c:df:8a:5b:44:dc:5d:a4:cf:b0:91:
b7:c8:30:5a:3b:43:31:c2:8d:b9:4b:e5:c8:93:61:68:3e:66:
cd:6d:c0:09:69:5b:35:45:b6:94:1d:ba:30:f3:be:fe:48:34:
14:da:59:cc:69:f7:02:d0:d9:11:0a:dd:16:ad:3e:32:41:1e:
71:d3:9d:56:80:c6:24:d1:15:77:cc:7e:2d:e0:dc:34:1a:8e:
85:73:0a:9f:a3:24:dd:06:61:93:38:14:a2:45:d1:4b:c7:60:
7d:9a:b6:d5:4b:07:d8:58:ee:0b:e2:f3:46:ba:70:b1:6b:cb:
52:5c:2a:8b:8d:ab:9a:4f:78:ab:12:15:39:a6:2c:53:2d:be:
e7:cd:93:9c:d8:cf:95:64:c3:e1:10:59:89:77:0a:44:4a:68:
1c:99:ec:08:92:84:1e:8a:1d:1d:6e:87:d4:a0:8b:73:05:f4:
0b:e9:f3:10:4a:42:56:ef:56:7b:4b:94:cd:19:3a:b1:ca:5b:
16:db:fa:6d:9d:37:a2:77:f0:c9:c2:43:0a:7f:a1:05:15:cb:
62:58:dc:60:54:13:54:b3:7f:4b:e5:c0:1f:ff:83:ff:a2:8a:
32:fa:1a:c0:60:cc:b0:81:3b:f3:9d:35:e4:97:fb:d0:f6:35:
cf:af:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:32:31 2025 by rpki-client