Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: t6UKQDRP1OMJgePRIwbHofS5smLwytFvhPj4ZH9YE5c=
Subject key identifier: 17:69:5D:FB:15:81:F9:3B:9D:FA:2F:80:32:87:72:FD:95:3C:E6:BA
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 019A20D20C66D284B3D97C130571EB0F4567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 0509
Signing time: Sun 26 Oct 2025 14:00:27 +0000
Manifest this update: Sun 26 Oct 2025 14:00:27 +0000
Manifest next update: Mon 27 Oct 2025 14:00:27 +0000
Files and hashes: 1: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (hash: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: 93Rob0+bBIvasg5p6rxATInAHUCiOaBv5sEEKpXv/wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:0c:66:d2:84:b3:d9:7c:13:05:71:eb:0f:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Oct 26 14:00:27 2025 GMT
Not After : Oct 27 14:00:27 2025 GMT
Subject: CN=17695dfb1581f93b9dfa2f80328772fd953ce6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:df:70:34:7b:aa:38:2f:28:96:68:bd:5a:
36:59:54:f4:16:5f:18:8a:61:82:a7:2d:20:92:ee:
1b:f0:38:eb:9f:f8:54:5e:54:0f:38:5c:68:e4:f9:
1f:90:63:0d:27:e9:65:c7:c5:34:e8:cd:fc:ec:1f:
1b:4b:0c:61:2e:39:f3:e4:c3:5f:4a:fe:df:5b:5c:
9b:3a:14:78:ff:e2:e6:f1:48:c9:5b:84:79:90:16:
5e:e8:1a:74:2c:37:eb:3f:91:5a:4c:0c:c3:9c:78:
97:0a:c7:f7:5e:f1:7b:80:32:53:c5:12:41:2b:7d:
48:28:63:3c:8d:43:81:2a:1f:f7:de:55:17:94:20:
81:84:5b:b7:30:ab:21:eb:d2:72:5c:19:b8:99:46:
e2:a7:18:d9:f8:b3:97:a0:e1:d3:1e:b5:42:f4:67:
54:94:e5:a2:ac:35:a4:0a:db:7c:8d:f2:b5:1d:2c:
ef:b7:2b:6e:d9:06:a8:a0:b5:dd:de:05:57:56:00:
b7:8e:9c:fc:bd:c2:39:f9:aa:02:77:3e:ff:5a:a0:
7a:72:a5:47:ea:a0:58:eb:05:d8:f3:0c:bd:48:cd:
96:6b:da:3e:4e:85:04:50:eb:c1:b2:a2:54:f1:23:
cd:51:ce:cf:02:3b:dd:6d:ca:c4:0f:94:63:e1:26:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:5D:FB:15:81:F9:3B:9D:FA:2F:80:32:87:72:FD:95:3C:E6:BA
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:2e:67:43:39:94:c4:4a:fc:42:2d:9a:3e:08:58:45:00:
43:39:c8:b8:f4:46:37:18:3a:c7:4e:e7:2f:27:d2:98:48:4c:
cf:0f:bf:b3:da:36:53:a8:1a:24:58:9a:7b:ea:eb:8c:23:28:
dc:63:87:08:e7:e2:35:64:3b:71:74:f4:72:ab:ac:db:b5:7c:
de:65:b5:a5:65:2f:72:94:d8:68:44:cf:ea:d0:71:23:38:cf:
32:e7:1a:6a:60:ea:aa:08:85:1d:3a:ef:a2:28:4d:e3:33:8c:
4b:c9:ff:56:e3:65:e3:53:e2:35:22:fc:9f:24:ad:fc:54:bf:
99:02:59:95:e9:98:59:5b:dd:e7:f7:8a:60:67:87:71:f4:97:
36:7a:99:8f:8c:3a:eb:83:73:df:76:c6:9e:0b:69:a8:b7:7d:
93:fb:3f:79:cd:f1:20:9d:56:dd:48:81:90:47:1f:01:66:3e:
b3:90:0c:68:81:2e:fe:50:c7:c6:59:62:a8:e6:ee:4e:cc:17:
c7:d3:28:89:43:3f:2b:81:b4:bd:c2:40:2e:bc:67:3b:fd:bd:
4b:f3:52:f6:47:8d:1a:62:80:7e:77:34:b6:9e:3e:34:2c:c2:
94:d5:2f:be:ad:37:00:75:72:1c:72:48:52:0f:a4:74:f9:39:
9b:f4:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:19 2025 by rpki-client