Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: 3lzPPafDYAAnFDi27dqtIKfPTMbkgCIjjFPkcsrxoGQ=
Subject key identifier: 7B:DA:DA:42:BA:54:C9:B2:1E:12:5D:09:37:F1:DA:EE:30:3D:DE:2A
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 019A1BABA5B9E5F7DDABF05328170BC8ADB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 0D0C
Signing time: Sat 25 Oct 2025 14:00:24 +0000
Manifest this update: Sat 25 Oct 2025 14:00:24 +0000
Manifest next update: Sun 26 Oct 2025 14:00:24 +0000
Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: PtL7Pz+ub5uCexAromBxwKegbd8KBD+Jk0aZ0z6xWDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:a5:b9:e5:f7:dd:ab:f0:53:28:17:0b:c8:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Oct 25 14:00:24 2025 GMT
Not After : Oct 26 14:00:24 2025 GMT
Subject: CN=7bdada42ba54c9b21e125d0937f1daee303dde2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a4:3e:32:61:20:35:7d:7d:f5:0c:75:90:76:
64:2c:aa:66:d7:f1:db:c0:dd:bf:28:0f:d8:82:29:
52:a9:a4:c7:74:56:5f:2a:22:8c:db:ca:50:93:1d:
60:9a:7a:3e:ce:5b:60:1a:3e:c0:5f:4e:c6:13:53:
46:cf:a4:44:00:d0:7a:08:f8:e2:e3:85:71:45:8d:
3a:26:e9:8c:89:c0:ff:8f:89:44:ff:d1:02:f6:bf:
32:c6:8a:3d:5b:fd:4b:f5:58:66:a0:2a:29:d9:20:
1e:de:a0:b4:cb:9a:c8:03:45:7e:e3:04:4e:43:71:
3a:fa:1b:9e:a1:68:e8:94:e9:24:37:67:f6:dc:c0:
94:da:05:30:69:80:6c:fc:a1:4b:14:bb:bc:4f:1d:
e3:75:4a:7c:af:d6:86:43:70:a0:50:0d:b2:e3:09:
b4:6d:d2:88:c7:69:31:45:8c:fd:e3:55:12:46:d1:
d7:2e:30:3f:ad:b1:b2:f3:57:09:1e:a1:23:65:17:
c1:67:fa:90:54:dd:14:7f:c3:77:28:cf:8d:7c:90:
e9:6c:a6:3d:af:fc:b4:c9:da:91:36:bd:50:4e:04:
fb:5b:a9:b8:49:3c:d3:79:6d:3e:f4:08:d5:eb:a1:
47:fb:ea:01:c4:75:84:6b:ff:b4:05:44:e3:11:47:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:DA:42:BA:54:C9:B2:1E:12:5D:09:37:F1:DA:EE:30:3D:DE:2A
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:5f:e6:2d:7e:7a:e6:5b:c8:c8:55:57:36:f1:3d:53:d6:
76:c3:ac:02:b9:84:dc:96:99:94:67:18:9a:f3:93:5f:82:93:
a1:b3:fd:02:02:ae:65:b8:28:12:05:7d:7b:69:6c:5e:25:11:
d7:00:29:4c:80:75:60:f1:aa:73:05:ce:49:6f:66:8c:86:91:
d2:c5:bd:37:3a:4f:03:fd:de:37:60:6c:45:33:88:0d:50:c6:
69:fa:c6:eb:b7:4a:10:c6:bf:ca:c4:19:d9:18:2d:ca:75:df:
5d:04:e4:3c:66:3a:23:f3:9a:3b:db:05:6d:18:01:1f:26:45:
cd:9e:c8:65:4a:b2:09:c0:6f:41:a3:72:52:06:de:10:27:98:
f8:4f:7f:87:f9:24:51:1d:2d:ff:98:50:0a:69:4c:f2:f2:de:
66:b1:12:13:30:17:14:d4:10:eb:8b:01:eb:68:dc:52:f1:65:
1d:f9:11:83:ed:54:ca:0e:7e:02:b8:01:3a:27:43:1f:45:49:
0e:41:41:c6:a2:41:3d:15:21:fb:ac:ef:f3:bd:d7:96:4e:93:
e2:5b:42:65:87:7f:3d:bf:be:ea:e2:1f:d4:f1:54:a1:08:f1:
da:95:58:c0:e1:45:93:ca:67:39:32:37:7e:2f:83:c1:72:2d:
36:2e:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:00:04 2025 by rpki-client