Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: JNnYiT7lQTkOkq+xm8R5i+Sl5voLVFIw0l0OR6Np6f0=
Subject key identifier: 67:22:2E:35:88:4B:6B:9B:26:84:7C:61:7C:7B:B6:54:F7:9D:E2:9F
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019A7225BFF10866E7FB9D8699D8B56BA4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0116
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: XOS5Zq1p9/jlvVjlcmvD+VvjSueakmWB8kCeIZe1FFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bf:f1:08:66:e7:fb:9d:86:99:d8:b5:6b:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=67222e35884b6b9b26847c617c7bb654f79de29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:d6:ba:49:c6:7d:cf:fe:c4:92:20:f4:45:
5e:27:72:d5:57:c3:ef:1c:10:f2:26:0d:b7:d3:da:
60:08:2d:84:45:f4:09:bb:fa:74:ac:d0:ea:86:22:
e4:6a:7d:18:22:53:96:b3:fb:d5:3a:38:3d:ad:fe:
44:aa:f2:b1:68:f2:a2:3c:ce:9c:a9:04:ff:02:01:
e6:05:57:fe:64:ab:29:b9:00:cc:7f:29:d8:8c:a5:
49:84:e0:a3:b4:ef:05:54:e2:79:6e:6f:cc:23:ec:
96:52:d7:24:e7:e4:b2:5d:a2:5f:70:37:77:27:2f:
13:ba:af:81:bc:8a:bc:22:a6:aa:df:6c:73:94:03:
44:bb:cf:ae:f7:69:a8:7b:8e:99:36:6c:fd:2e:93:
63:9e:d8:a3:39:eb:16:d8:cf:09:9b:5a:1b:c4:e0:
5b:63:18:e4:dc:5c:3a:0e:f4:62:9c:75:e0:06:01:
38:c3:80:38:16:50:91:69:a5:5a:41:ae:4d:52:85:
de:49:26:27:31:b0:35:cf:56:11:e8:0d:6b:e9:95:
29:76:a8:03:51:b3:42:11:f0:73:c8:09:c0:98:a8:
15:c6:02:46:f9:5c:b4:19:4e:4b:0d:d5:93:4d:aa:
e6:95:41:f3:46:92:46:11:1a:8f:ca:45:31:eb:2e:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:2E:35:88:4B:6B:9B:26:84:7C:61:7C:7B:B6:54:F7:9D:E2:9F
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:67:b4:dd:dc:13:12:94:7f:a6:36:e3:02:a8:bd:6f:62:
95:6e:f0:1e:46:57:05:14:4c:c7:3d:00:a2:56:07:8f:9f:79:
f6:98:e2:ef:7c:56:fa:a7:84:bb:5a:96:05:02:de:1c:27:3d:
96:70:23:52:60:47:3b:c2:ae:a0:7e:25:b6:62:9a:c3:2c:30:
04:21:f8:c8:ee:37:a1:69:e6:b1:4c:14:9e:aa:ca:73:e5:f4:
e3:de:ba:75:ba:dd:cd:41:47:5a:f3:21:79:4a:69:6c:60:22:
9e:fd:81:19:4b:6f:de:9d:a7:16:1d:1c:e6:b0:21:73:3f:f0:
50:23:59:59:fa:33:42:3c:91:e4:bd:d0:ea:7d:54:c1:d8:b8:
52:f8:dc:4e:7f:a6:8a:26:f0:a8:66:33:11:8b:3b:d7:10:f8:
8c:cd:ea:0a:dd:67:f5:db:fd:d4:09:66:0c:b7:8b:96:33:38:
1d:e5:de:40:96:7c:a2:8f:52:f1:d7:72:e9:d0:a2:dd:ff:7c:
95:81:9d:9e:ad:3d:ef:a1:78:70:db:8c:c9:57:20:d0:6e:45:
1e:da:df:60:a9:20:47:1a:0f:fa:c0:1d:73:23:3a:6c:c9:6a:
c4:f8:e4:ff:2e:5c:44:4c:a2:aa:86:9a:21:26:7a:c8:a0:35:
62:ac:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:32 2025 by rpki-client