Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: EqkhKEuId+G9T3HUa+FioybP/aMR6wj3H6xQWSbYB5o=
Subject key identifier: 67:90:7A:7C:40:B4:7E:0F:29:3C:A9:2D:0E:C2:40:CD:89:31:2C:52
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019A0AEF5E68B67F1F0D60D3786383F8BCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0C4C
Signing time: Wed 22 Oct 2025 08:00:50 +0000
Manifest this update: Wed 22 Oct 2025 08:00:50 +0000
Manifest next update: Thu 23 Oct 2025 08:00:50 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: ZpRp/SHuWxvWGZ6SuqXR1Ne91G5HaklWTQFRU8C+3sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:5e:68:b6:7f:1f:0d:60:d3:78:63:83:f8:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Oct 22 08:00:50 2025 GMT
Not After : Oct 23 08:00:50 2025 GMT
Subject: CN=67907a7c40b47e0f293ca92d0ec240cd89312c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:88:bb:d3:36:8b:99:2f:20:5f:22:06:72:
85:98:66:74:bb:0d:7b:38:00:3d:79:e2:57:e3:76:
aa:d3:df:be:4a:0a:65:49:fa:a7:c1:b2:5d:71:fe:
ec:0c:cd:5e:b0:17:9c:6a:0c:7a:de:e5:76:7b:1d:
38:f0:b3:d3:bd:f3:97:80:1c:a0:a5:1b:54:21:93:
59:06:e5:38:f9:1c:be:7a:a3:ae:56:68:05:4c:1f:
bc:e6:6c:81:23:03:19:57:c2:bb:21:11:96:bd:aa:
1b:91:27:9b:00:e8:d7:0b:65:d3:fb:1e:48:72:03:
d9:b9:bc:ac:6c:de:08:69:c3:3f:f0:df:49:04:eb:
51:e3:e3:c0:bf:01:78:ff:76:a1:29:b7:af:11:ef:
b5:0e:9e:86:cd:77:75:76:ed:11:03:ae:b3:32:28:
46:83:42:17:a8:b0:c7:3d:52:40:1a:19:f2:21:c0:
22:d7:e1:49:b0:4d:32:5e:88:4f:26:8b:b8:2a:25:
de:a4:e9:38:64:17:a3:af:53:d7:e0:a8:45:b0:34:
98:c3:12:b3:a9:ca:17:64:a6:f9:d0:14:1d:b0:a4:
c4:23:52:86:3f:62:39:f8:09:2e:72:5c:49:46:85:
0f:05:74:00:74:b3:2a:74:44:eb:08:0a:a1:50:12:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:7A:7C:40:B4:7E:0F:29:3C:A9:2D:0E:C2:40:CD:89:31:2C:52
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:cd:52:d7:e7:5e:4e:09:49:6b:3d:bd:17:42:87:7a:b8:
31:bd:d6:b8:68:3f:eb:2a:b9:b1:d4:48:16:4e:34:7c:1a:96:
58:41:96:42:b1:d0:77:4a:72:d7:df:65:26:1c:3d:aa:b5:2c:
9c:f8:e8:47:66:96:bd:aa:22:c2:16:62:22:e9:73:c2:b6:cc:
77:eb:f1:53:8a:95:9c:99:65:2a:a1:6f:01:dd:15:ae:09:62:
04:d1:0a:e0:17:99:81:85:eb:ac:03:9c:03:e6:4f:31:36:76:
78:6e:3f:bb:03:e4:f7:72:1c:4b:a0:4b:c4:2a:6a:c1:55:0b:
70:0e:91:b8:4a:4d:d6:3b:af:01:90:43:16:70:06:39:99:14:
d0:56:1e:6c:d8:94:86:4a:e8:76:10:de:64:9f:a3:86:02:b9:
37:1e:e9:5f:41:1b:7f:b9:9d:80:23:c2:9b:c8:d8:44:91:68:
35:95:6f:29:85:07:aa:ec:14:78:9b:73:63:f3:74:1a:d2:3e:
b4:e7:9e:9b:1a:09:a3:3c:27:54:40:0f:77:b4:5b:26:62:ba:
df:e9:36:f8:cd:1d:35:ed:d4:34:19:a6:50:32:4a:05:a6:a3:
41:54:14:d8:c5:f0:26:a9:6e:67:d4:07:97:fb:0f:33:57:88:
89:ba:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:00:25 2025 by rpki-client