Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: ABI4oPfmuRVsjS09V77MKqZhSlVmLjmEFKv8imTLToM=
Subject key identifier: DD:0F:86:4D:6C:37:2F:0F:63:5F:A0:03:CF:AD:FC:3B:FC:9E:E5:F8
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01993424EFA1967C389F762F7904579FFFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 15D2
Signing time: Wed 10 Sep 2025 15:00:59 +0000
Manifest this update: Wed 10 Sep 2025 15:00:59 +0000
Manifest next update: Thu 11 Sep 2025 15:00:59 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: MRtDFkr5FHTN8UEwgOy9E9HLITnxBaL3LKs1EexYeO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:ef:a1:96:7c:38:9f:76:2f:79:04:57:9f:ff:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Sep 10 15:00:59 2025 GMT
Not After : Sep 11 15:00:59 2025 GMT
Subject: CN=dd0f864d6c372f0f635fa003cfadfc3bfc9ee5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:86:54:84:b8:05:16:e5:ca:1b:6a:e4:2b:
90:24:28:d8:bd:42:4f:f8:da:9c:f2:9d:f8:46:9f:
d4:3c:1b:a4:d1:eb:ea:47:ba:b3:17:c4:bb:bd:be:
a6:13:ca:cc:15:cf:59:a4:ab:b3:92:16:83:3e:f6:
68:85:9c:ca:1b:4c:1e:92:d4:cf:04:26:0c:4d:ad:
66:55:b3:f4:4a:ce:f0:64:de:7e:e9:bd:3c:d5:17:
50:2c:a8:90:82:41:38:5b:92:a2:a4:7a:6d:10:f2:
1d:22:15:30:42:fa:dd:e1:56:66:f4:17:44:12:e9:
9c:00:b1:26:bc:8c:c8:1b:cb:2c:10:17:09:ed:d3:
9d:c0:ab:f6:76:9f:0d:cc:6d:74:11:b9:e1:38:5a:
09:ba:9d:e8:57:e8:99:57:80:5a:88:5a:64:1d:38:
43:b2:80:29:12:31:42:86:ef:57:4a:a6:17:1c:e9:
bc:44:bc:25:fb:27:a0:73:6c:81:42:7d:a1:6f:4b:
a0:6e:23:f5:a4:6b:12:af:f7:2b:bf:5e:9b:2f:ff:
98:74:50:8e:0e:44:54:44:65:88:43:5c:01:a8:67:
9c:18:ac:66:fb:ea:86:1f:36:2e:ce:dc:6b:4e:c1:
dd:c4:53:64:a7:a0:0c:82:fa:f5:e3:0b:37:1d:58:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:86:4D:6C:37:2F:0F:63:5F:A0:03:CF:AD:FC:3B:FC:9E:E5:F8
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:33:24:fd:20:e5:32:42:fc:d2:19:99:80:39:b1:ae:6e:
fa:78:21:7c:39:fa:c2:c1:0d:8a:c8:32:f6:34:c9:19:8d:a9:
a3:c6:29:73:40:9e:72:d9:59:da:e7:6b:99:6f:c5:02:5f:30:
14:30:9c:49:24:26:ab:88:b8:04:f8:2a:a1:45:13:af:c6:d2:
e9:1c:e1:95:ae:b4:48:5c:b6:8e:f7:7a:77:1b:76:d3:3c:4b:
fe:8b:f1:75:bb:14:60:04:f4:70:78:91:8d:87:80:ab:ef:39:
3d:bb:ce:00:ba:4e:f2:82:7a:08:5f:6f:fc:14:42:4e:5b:dc:
dd:6d:7b:8d:1f:d6:7c:c1:33:c6:ce:cd:13:72:93:88:88:f2:
af:57:31:68:c5:ba:f7:a8:09:77:36:af:1d:9a:14:43:8e:ef:
9a:36:2c:6e:01:e6:7e:1c:32:ed:f4:97:ab:a5:e3:e5:82:1d:
0a:20:86:0d:3c:fd:4f:83:d1:8e:74:7d:51:b5:d4:3a:ad:78:
87:82:0c:66:a3:db:5a:0d:e3:08:ee:31:5d:3a:39:f3:87:5d:
90:77:da:99:f5:13:bf:7f:7e:99:04:91:5c:95:77:5e:fe:70:
66:f5:fd:d3:4c:e7:39:7d:5b:92:27:c5:d9:72:67:0b:55:2d:
82:29:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:31 2025 by rpki-client