Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier: vlzEhLD4xWz7wQQmkGDutj9+Ej9uDOhrGfX0OIL7rUA=
Subject key identifier: 4B:E7:19:14:CB:94:86:44:5E:FF:8E:D0:20:78:D8:4B:E7:AD:3A:F9
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 019A1C19ED7B470647996DE5D7DB3FD05487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number: 0C38
Signing time: Sat 25 Oct 2025 16:00:52 +0000
Manifest this update: Sat 25 Oct 2025 16:00:52 +0000
Manifest next update: Sun 26 Oct 2025 16:00:52 +0000
Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: SXoABCazsHogpSns2IMgLrx1EPNY22OgJoc5eTht17c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:ed:7b:47:06:47:99:6d:e5:d7:db:3f:d0:54:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Oct 25 16:00:52 2025 GMT
Not After : Oct 26 16:00:52 2025 GMT
Subject: CN=4be71914cb9486445eff8ed02078d84be7ad3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:d3:16:9c:e7:1a:f9:2d:c0:3a:ea:42:6f:
93:3c:20:2f:dc:26:bc:4b:bf:e6:4c:2b:85:62:e1:
11:67:90:93:55:78:3e:18:b8:73:35:7b:8a:82:19:
19:2a:5e:07:d4:06:0b:86:14:b0:06:2a:b8:9d:86:
e2:e1:07:88:2d:94:d8:0a:47:32:e5:50:1d:b1:64:
c6:a9:fb:5a:17:7b:bd:24:b9:94:ec:de:de:97:6c:
76:05:e8:e2:7b:24:3a:20:07:52:0a:e9:06:75:8c:
05:41:93:6b:11:7e:f9:4d:0c:94:34:b3:15:8e:b3:
b3:a7:50:0e:64:14:9e:09:ec:b0:89:ce:e3:b6:cd:
9c:e4:4f:b5:ff:8b:6d:1f:3c:23:54:ab:69:a2:2a:
4c:3d:2e:7e:1e:d5:6b:27:88:b4:5b:6a:2b:29:49:
68:aa:8e:1f:73:af:4a:be:5a:f8:a0:00:75:14:cb:
05:6c:83:aa:c8:ef:e0:f3:c8:f8:d4:41:e2:86:71:
64:92:5e:2f:31:94:6c:f0:b3:13:41:e2:a3:44:5f:
78:65:e5:63:e9:02:09:a4:84:ce:85:f0:75:e6:2f:
e9:be:2f:9c:4c:4c:d8:91:fc:29:2b:79:53:1a:ea:
fe:b6:11:59:c9:8a:9d:3f:4d:58:e2:fc:34:ea:e2:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:19:14:CB:94:86:44:5E:FF:8E:D0:20:78:D8:4B:E7:AD:3A:F9
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:3f:3f:6c:fc:f7:e9:8a:d9:14:c6:a6:01:d5:f8:a4:99:
4d:a7:9a:37:f8:8a:7c:5a:03:2e:65:f5:2d:2a:94:7a:48:c8:
f7:cd:5f:15:3a:49:69:b1:c5:99:db:e4:28:4e:cd:d6:e7:a2:
3d:5f:99:f1:be:a6:24:21:b3:5a:91:60:b6:ab:35:fe:3a:a5:
49:db:e3:ed:db:b2:85:9e:03:20:13:9a:0c:ef:de:a3:17:bd:
85:f1:51:e6:5a:4e:b8:8b:cf:13:74:cd:2b:2c:be:f4:2a:7a:
d1:b5:71:ee:4f:0d:44:19:e0:6e:ac:15:e0:6d:50:e1:6a:e0:
26:31:0e:88:d0:5c:55:a2:d8:49:e4:f2:9d:dc:20:45:95:d6:
1a:86:47:1c:cc:4f:4c:1a:bf:bd:45:98:24:2a:31:81:b8:d6:
ce:f1:7f:a8:b9:59:53:72:9a:a6:fb:15:fe:ca:13:a0:70:71:
f3:17:bc:48:f9:53:b7:bc:cd:69:ad:f2:77:aa:21:12:80:d7:
5b:17:c4:3e:76:a3:19:b1:ff:39:6c:76:cc:7e:c4:7b:77:6d:
87:2e:9b:ea:01:b5:b9:67:52:79:c4:9a:84:7a:1b:3c:19:ca:
fb:20:ac:ee:f9:05:85:15:c5:67:04:07:67:6c:d2:39:7c:de:
63:c4:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:16:04 2025 by rpki-client