Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: Sy4623Sr5972pxrp55Rrt84wg2uR7JjO53JgmSOCKM4=
Subject key identifier: 7E:72:1F:3E:0E:9E:E1:19:87:08:63:44:9B:59:27:DA:62:CD:1C:BE
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019A299E4958F9C767D154CFE340F811D9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0A28
Signing time: Tue 28 Oct 2025 07:00:30 +0000
Manifest this update: Tue 28 Oct 2025 07:00:30 +0000
Manifest next update: Wed 29 Oct 2025 07:00:30 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: HklW7saPZEh/wh8Q0deq3+DvI0DqoBSi2NVq08+qjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:49:58:f9:c7:67:d1:54:cf:e3:40:f8:11:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Oct 28 07:00:30 2025 GMT
Not After : Oct 29 07:00:30 2025 GMT
Subject: CN=7e721f3e0e9ee119870863449b5927da62cd1cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:fd:a2:5d:40:3d:57:e4:81:4e:b6:ea:ac:
87:c0:fb:10:99:da:d0:9e:ea:f4:73:17:cc:2a:5d:
04:4a:36:ed:2c:96:8c:06:d3:89:a7:77:bd:e9:8f:
1a:03:8d:ce:8b:dc:4c:e6:b2:b1:bd:38:d9:29:4e:
9f:d6:a0:a0:d7:b8:6b:0c:20:1f:48:62:ed:0a:54:
bb:fc:3b:c2:b7:d1:69:d8:0f:c6:33:db:38:06:f8:
cf:3e:f3:da:21:7c:c4:8f:29:43:1a:3a:a9:7d:80:
b9:da:c1:f9:6f:7e:cb:19:c8:84:5d:76:f5:0a:ac:
93:0a:7d:ad:8f:bf:99:64:83:63:ee:cc:55:1e:5b:
79:61:59:0d:47:71:03:ba:87:13:dd:d5:0c:ce:e5:
f2:a2:e2:2c:0f:75:51:f4:16:da:16:28:e2:c2:77:
54:b9:96:40:52:eb:2e:26:f6:c5:91:6a:ac:42:d0:
9c:c1:5a:50:ee:6f:e9:e1:7f:a7:66:23:96:d3:a9:
a9:f4:3b:33:9d:12:a9:75:52:21:96:b4:06:19:5c:
4f:ab:ef:0e:c5:65:db:d6:30:d0:44:b4:de:fb:d0:
47:47:b6:57:f6:39:13:a5:59:25:d5:c6:58:d0:5f:
03:70:13:ff:18:a0:c6:b9:c4:f8:69:37:b7:e6:3a:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:1F:3E:0E:9E:E1:19:87:08:63:44:9B:59:27:DA:62:CD:1C:BE
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:f4:3b:b1:66:2b:1b:0d:0e:10:7e:f2:bb:7a:2a:22:b1:
1b:ce:1d:85:c7:42:54:ee:9e:b3:3a:cb:d0:47:70:5a:12:3a:
d4:7d:16:d9:5d:66:b7:82:95:c0:da:8a:93:72:99:51:fc:f4:
34:b9:f5:af:dc:ae:5a:f9:e0:0f:57:9e:fa:34:66:90:88:e7:
da:3e:bb:23:b2:36:75:99:fc:d1:fb:e2:9d:ea:ce:d5:a2:35:
ad:3b:76:83:ff:e7:5d:18:f0:cd:a8:61:55:02:c9:4b:13:70:
ce:1b:61:1f:d6:79:01:98:c2:ae:aa:44:da:12:d2:c9:82:af:
4d:f1:e4:ac:ff:d8:45:cd:49:c4:e4:f0:ae:53:9e:4d:71:9d:
ea:41:b9:28:ac:65:a4:bd:da:b2:29:41:0d:cc:b1:5f:f3:57:
e7:32:8a:d4:97:bc:a9:8d:3c:5c:02:8e:59:cd:f2:b2:47:ea:
35:90:1b:69:a7:ab:ea:28:81:f7:42:d3:a6:7d:c2:5f:f3:9f:
9a:92:67:bb:ce:79:8b:4e:c9:52:f3:1d:6a:2f:ea:a2:98:d7:
72:a4:a8:4b:b4:2e:41:51:32:7a:25:de:c1:61:8c:3e:63:8b:
0e:32:57:0b:3f:12:ff:d9:03:15:66:62:75:66:49:8a:36:88:
35:9f:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:54:20 2025 by rpki-client