Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: jkLmabdOvMTpkjTlod1h9AFzUhMDXRl8RwhneJ/VOho=
Subject key identifier: 12:B4:6F:2C:7C:FA:B1:ED:1E:97:A6:5B:FF:8D:FD:05:A6:14:4F:01
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019A0BCB59190FB65B103220830698D48388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1457
Signing time: Wed 22 Oct 2025 12:01:07 +0000
Manifest this update: Wed 22 Oct 2025 12:01:07 +0000
Manifest next update: Thu 23 Oct 2025 12:01:07 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: muOsRS8Onx05D6IQv39VmL4FVm8lkeHI48DHii+w5kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:59:19:0f:b6:5b:10:32:20:83:06:98:d4:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Oct 22 12:01:07 2025 GMT
Not After : Oct 23 12:01:07 2025 GMT
Subject: CN=12b46f2c7cfab1ed1e97a65bff8dfd05a6144f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:64:bb:77:ca:2e:53:85:a2:5d:1a:ec:c0:
24:48:84:cf:ed:0c:e6:d1:ad:ee:14:e0:94:8b:26:
26:30:25:0f:03:3e:b3:99:80:fb:af:fd:e6:66:3d:
c3:a0:9f:66:ab:ae:f4:d0:9b:68:10:09:be:0c:c0:
c0:46:17:ef:f0:8d:02:93:f3:22:c3:27:d6:7f:07:
98:7f:a0:aa:fc:55:1b:ef:96:7d:fc:6d:54:cc:d7:
dd:67:84:96:5c:d5:8e:49:61:d9:96:11:33:6a:3c:
29:a7:f2:44:56:69:c9:1e:11:f4:a7:28:b8:bf:75:
36:b1:8f:96:f7:79:5a:c8:bc:f5:d8:0a:c6:54:5d:
b8:4f:ad:64:72:9e:a3:53:8f:47:b9:a0:c4:c0:58:
29:ed:6c:c7:a6:08:c8:d0:68:a6:2e:3a:14:9e:a5:
b3:a3:9f:7f:06:72:14:80:1d:ee:7b:0a:d5:70:79:
fb:be:dd:30:cd:f5:76:ba:3e:b0:b5:6b:3c:6e:13:
d7:c4:cc:57:a2:96:d9:9d:ab:4c:cb:77:54:d7:f1:
f2:40:20:c7:c1:71:1e:88:9c:cd:36:c0:3d:0e:a5:
cc:30:67:21:2e:e2:5a:22:75:17:0d:be:28:34:80:
ec:c7:0f:16:a0:71:8b:ea:a6:ad:53:97:90:30:27:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:6F:2C:7C:FA:B1:ED:1E:97:A6:5B:FF:8D:FD:05:A6:14:4F:01
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:16:9a:ef:78:7f:64:52:35:74:7b:88:ae:6d:7e:a0:f0:50:
88:ce:88:66:32:b9:3f:fe:a3:f1:ed:70:8b:7c:e4:e3:4e:f0:
61:9d:15:67:b1:9e:5d:c8:71:fb:6f:bd:0d:8d:56:b1:26:59:
96:90:5f:78:65:1e:2f:fe:81:e4:f3:b9:03:a9:b7:74:ad:89:
39:b4:0a:55:a6:8c:a9:22:32:2e:51:5c:26:9d:6b:84:8d:15:
79:2a:cc:a1:f6:cb:91:db:d6:9b:8f:05:de:9a:bc:37:b9:f1:
5d:f7:eb:40:93:98:aa:39:a2:03:e2:5e:ed:ac:25:50:9c:2f:
a0:f4:81:60:cf:04:22:e5:a4:c9:cb:3e:22:b2:d8:61:50:2a:
ff:40:e6:a7:c6:f0:0d:ac:a5:7e:3e:6f:8a:4f:ec:ee:bb:3b:
ab:43:31:a3:31:46:57:da:9d:e4:47:06:e6:f2:52:7c:cf:f6:
d5:29:f1:b6:19:d4:34:0c:fe:6e:9f:ab:e3:f8:e0:46:19:63:
0e:69:98:c7:f8:9f:d3:63:7c:00:15:d4:c0:ac:50:f2:92:b0:
39:fb:2f:26:07:de:bf:2a:5a:5c:81:36:c8:8d:be:96:0e:08:
04:65:85:84:74:b2:f7:67:98:e5:25:46:dc:51:18:97:ce:15:
f6:2b:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:56 2025 by rpki-client