Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: R5+X4WOVmKMMuJijBVzkaW6cIVnNBfoUktTcrZ4agKU=
Subject key identifier: 3D:F8:52:5F:18:3C:50:60:90:EA:8A:F3:60:6E:C4:7E:AA:08:66:F0
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019A172A705FED1A91F3FBB43D9F47A893C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: D1
Signing time: Fri 24 Oct 2025 17:00:48 +0000
Manifest this update: Fri 24 Oct 2025 17:00:48 +0000
Manifest next update: Sat 25 Oct 2025 17:00:48 +0000
Files and hashes: 1: TbZ9-J7RJ19MnUwHQhG72h3QmmA.roa (hash: 1KAnW0BNGRWt07l0J8xmwG1lZvzCRjTvOjNa6gA0ebQ=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: 3gwWnuBbbiU7vXhvzTsGnxLkOT7quKAKMy15AGDPVJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:2a:70:5f:ed:1a:91:f3:fb:b4:3d:9f:47:a8:93:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Oct 24 17:00:48 2025 GMT
Not After : Oct 25 17:00:48 2025 GMT
Subject: CN=3df8525f183c506090ea8af3606ec47eaa0866f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:b1:a9:8f:f2:8d:f0:4f:ba:aa:5f:80:fa:
dc:4f:99:e4:9c:52:60:53:df:18:2a:a4:1e:68:9a:
b3:f5:29:71:b3:3b:b3:84:4f:51:30:dc:12:33:79:
1a:f5:ec:b6:a7:c2:a0:79:61:4e:d8:f7:99:7a:c4:
32:17:5b:1e:fe:9f:65:94:40:04:bb:0f:88:a8:ac:
9d:bb:62:d6:c8:a8:2a:26:61:b8:da:83:4f:48:80:
69:9a:3c:f4:05:17:f0:67:1c:c9:71:44:df:10:fd:
e6:0c:1c:d9:4e:2e:39:79:df:76:77:fc:96:a0:f2:
14:f2:59:b6:c6:75:6f:8e:d1:87:e5:e0:24:a5:7f:
c9:b9:96:81:52:3a:ba:6a:e6:ff:8b:4a:e2:1c:70:
a8:ca:61:15:84:eb:48:5e:82:71:15:2c:60:4d:16:
7b:1b:bc:f6:ca:d8:30:57:6a:78:1a:09:0c:3a:48:
81:b6:f6:7c:47:8f:68:5e:fe:40:09:36:29:b6:c6:
d9:5b:37:e9:02:22:20:7d:38:2d:3f:7a:01:9e:c8:
fa:24:ea:ab:12:58:ca:56:83:01:ca:ff:6d:97:95:
da:09:5e:9a:03:a4:0c:47:97:f5:58:50:c4:ce:a1:
19:28:4d:07:8d:8b:4b:d0:c2:c9:12:c7:f9:49:47:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:52:5F:18:3C:50:60:90:EA:8A:F3:60:6E:C4:7E:AA:08:66:F0
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:65:e1:da:45:94:db:ce:e8:22:f8:0c:13:51:1f:d6:f1:
6a:08:4f:bc:ab:6c:94:19:16:02:35:85:a9:90:02:18:23:69:
33:d8:cb:dc:81:24:c6:17:34:56:d1:05:8b:f4:f2:21:f6:99:
98:d0:a0:a8:47:e1:8f:30:e2:c4:ee:a8:52:d3:98:ac:f3:07:
8a:07:f4:c2:0c:12:f4:d5:d4:a8:ad:96:de:97:f7:49:e8:94:
eb:fa:28:f8:cc:b4:e6:29:95:89:1a:9f:f8:12:e0:6a:05:03:
c9:53:29:e2:5d:9c:b6:79:24:e0:2e:92:df:dc:c0:a1:47:ea:
ae:bb:14:2a:65:e3:ad:cf:62:7f:b6:5f:7f:f9:f6:fa:d8:16:
d0:53:37:8c:21:33:23:53:dd:bb:4a:6d:22:df:aa:c4:d3:24:
1f:27:fc:52:a0:67:fe:5c:e9:89:44:14:f0:98:ab:ac:42:2e:
e9:16:ad:ea:e2:78:02:33:be:a7:52:a1:59:15:27:3e:78:f9:
7a:e2:52:6c:52:05:a3:31:95:93:69:05:31:2d:d4:88:4e:48:
25:06:a7:92:4f:cb:23:5a:db:53:fa:85:2a:85:de:31:ec:a5:
79:8d:63:c5:78:ff:24:bc:b3:97:49:15:e1:e6:50:c5:c5:58:
65:00:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:40:10 2025 by rpki-client