Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: W7FzSChhsfEhqlsgzPjC5fs1K4rIQvKXdTz34cyu9aw=
Subject key identifier: 80:11:FB:F6:D0:B7:84:3D:C1:11:53:E8:C5:0B:86:7F:9D:9E:D2:4B
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 019A23656C8CA3F387562AE7E7C93F6A66A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 02:00:40 +0000
Manifest this update: Mon 27 Oct 2025 02:00:40 +0000
Manifest next update: Tue 28 Oct 2025 02:00:40 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: TJ5jpb3tQ5gGq2uQG0QuW9LnOza/uJwA5H4wEdeLYJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:6c:8c:a3:f3:87:56:2a:e7:e7:c9:3f:6a:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Oct 27 02:00:40 2025 GMT
Not After : Oct 28 02:00:40 2025 GMT
Subject: CN=8011fbf6d0b7843dc11153e8c50b867f9d9ed24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:51:02:e9:94:48:94:c8:f0:4b:78:91:c7:
c8:4f:60:1f:71:5d:f5:41:18:98:e6:da:f1:2f:41:
30:33:c9:83:2e:30:de:a4:5d:6f:93:d5:d7:04:b8:
e1:f8:07:19:61:8c:1b:32:9b:7d:18:ba:5f:9b:84:
ff:9c:76:e0:00:d7:0a:0b:03:80:69:32:fe:c7:91:
64:9d:a0:fe:ea:cb:53:60:d0:24:df:30:14:e6:10:
91:8f:01:12:30:75:51:df:75:ec:35:80:0b:dc:1b:
3d:67:95:51:0d:eb:52:db:8c:7c:78:53:a0:8d:28:
06:e8:84:3b:35:2b:7f:c9:26:b5:4e:c0:7a:a0:bc:
be:a0:a0:0e:5a:15:dd:dd:10:3c:c8:b2:38:26:1d:
45:96:02:53:ba:80:0e:78:31:5e:a7:ba:a3:bc:79:
f7:3e:5c:68:e6:a4:ef:0e:3d:70:3c:7b:f3:e1:1b:
38:34:d1:31:12:5c:01:28:a6:fc:98:ab:ae:03:2b:
44:e0:7e:eb:7d:19:4b:ce:63:03:f0:7e:f1:d4:50:
68:63:71:65:3c:f5:a5:08:e8:c3:80:41:30:b5:87:
02:79:e7:37:21:dc:db:bc:d6:ca:86:28:85:66:08:
a4:08:15:4e:e4:5b:fb:10:d6:8e:8a:5a:05:3a:17:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:FB:F6:D0:B7:84:3D:C1:11:53:E8:C5:0B:86:7F:9D:9E:D2:4B
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:64:4a:fb:3d:05:14:a0:e1:4c:76:bd:38:ad:a9:74:d7:
b4:e4:67:fd:c5:92:4d:d0:30:ac:59:31:1e:61:b1:8b:58:d7:
9a:92:ff:6b:92:f7:16:c5:64:70:0a:c6:27:a4:87:4f:d9:7f:
0f:1d:21:93:ab:80:6d:ef:03:3f:83:f6:a2:b0:62:76:9b:10:
6d:66:9c:f8:f0:06:46:67:0d:88:28:e7:34:ac:2c:55:55:91:
cc:e8:ea:0b:a3:92:6c:ad:cf:cf:b4:1e:79:d0:be:c1:69:23:
95:24:0b:c6:79:a5:01:03:13:04:91:bc:69:ac:34:ef:7d:4d:
0a:3a:b0:4e:c4:5f:53:c6:84:da:05:e1:f3:58:ca:7e:25:df:
21:03:77:d1:80:80:c5:4f:e7:6e:c3:81:44:c1:00:bd:c6:3c:
f8:f3:fe:e4:b8:fe:5e:3d:d9:88:4d:c0:ad:64:9b:cc:ba:f5:
17:2c:72:14:4d:84:e6:eb:d6:fe:11:b0:d4:b8:d9:82:fe:57:
56:ac:11:0d:35:99:f1:f4:2a:cc:db:38:68:9f:36:05:8e:71:
85:a7:28:d3:9c:4b:07:22:d5:a4:3b:6d:16:94:7a:ea:81:e8:
1f:d8:58:fc:36:cd:e3:aa:9f:f1:5c:76:e4:3d:f9:67:ba:10:
a7:4c:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:03 2025 by rpki-client