Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: Zd1klAJw2dcXakaoy+K/J9q2/seljPQydYWMyfGulpA=
Subject key identifier: 6C:72:2E:0B:84:22:E1:D6:9E:BB:8D:CB:6D:54:82:8B:9C:50:74:A7
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019A1E07E22757734281A2ADB6D9EB0D1A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 10EE
Signing time: Sun 26 Oct 2025 01:00:24 +0000
Manifest this update: Sun 26 Oct 2025 01:00:24 +0000
Manifest next update: Mon 27 Oct 2025 01:00:24 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: DkO//DIjgbw3+bBRZCO8WtcLY13wdIDpnqqvYylsRos=)
8: xAgFfQaKEowdS70V9zbgoKMLSaw.roa (hash: hfLCxfCTfbaf8X5vKcrUM1lSCKQfVXa2EeKuQXwH66I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:e2:27:57:73:42:81:a2:ad:b6:d9:eb:0d:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Oct 26 01:00:24 2025 GMT
Not After : Oct 27 01:00:24 2025 GMT
Subject: CN=6c722e0b8422e1d69ebb8dcb6d54828b9c5074a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:95:94:51:01:34:bb:88:d9:c8:79:b8:28:
99:77:ac:a1:30:83:cc:b1:c4:fa:08:ec:b7:81:c8:
bd:fd:fc:c9:fe:78:b2:61:65:03:d4:bb:33:b3:9c:
a0:80:47:cc:27:6f:45:39:0b:d3:87:8b:47:78:cf:
dd:09:93:38:08:34:eb:6f:f5:bf:d8:65:60:61:68:
37:9c:7b:f5:e0:48:da:34:41:bf:10:65:86:1d:e9:
48:f6:15:76:1b:f7:63:4f:1c:c1:ab:37:10:76:a4:
ed:a4:5f:68:57:b6:08:af:69:31:7a:ae:13:da:94:
4a:97:e5:57:0d:a6:9f:1b:66:49:a1:d8:73:fb:ce:
7f:9d:13:a1:30:ee:eb:55:0d:00:5f:68:5e:d4:8a:
a4:1e:9f:eb:36:4b:f1:54:bd:a3:96:86:78:d5:70:
1f:b3:83:29:48:f2:8d:da:b4:8c:b7:04:69:7d:a8:
76:9f:dc:ae:ff:d4:8b:e0:90:46:a9:1c:90:3a:45:
d8:39:fe:be:f0:9e:a8:78:dc:90:68:03:1c:6e:46:
35:7d:9a:93:79:88:e0:95:60:2e:b3:18:1d:d6:ad:
f7:a1:44:8d:22:20:7e:50:d0:ec:19:30:fc:2b:1e:
f8:fe:43:52:ed:af:44:d1:fc:55:40:e7:cc:65:af:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:2E:0B:84:22:E1:D6:9E:BB:8D:CB:6D:54:82:8B:9C:50:74:A7
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e7:e9:2b:08:f7:e7:f8:75:85:39:29:07:f1:c2:df:ff:9a:
5c:d3:b1:c0:5b:30:03:d6:93:a9:23:09:10:33:d5:2f:84:89:
fb:c8:ae:bc:ba:b1:bb:c3:65:08:8c:d0:59:8e:6f:a7:0b:2c:
17:17:53:39:18:42:67:58:f5:52:97:c8:51:b9:8c:75:9f:54:
51:a9:b4:c6:59:a7:8b:03:c7:ea:71:f6:2c:54:ea:bf:a4:3f:
af:7c:12:9f:12:0d:13:a7:23:23:f3:f4:84:86:27:26:85:79:
ea:e9:7c:02:5e:80:df:b6:21:38:14:d0:b3:64:2d:37:fb:54:
32:5e:d3:c8:8e:36:0b:f9:fd:a8:43:63:5e:ee:2d:a1:3f:c9:
c9:3f:87:1d:ed:95:c6:15:87:05:1c:19:be:b7:fe:f0:c6:78:
9d:11:73:3a:7a:7a:94:dc:96:c4:bb:0d:b3:bc:4d:a8:3c:f1:
a1:c3:77:de:d6:6c:1b:6b:02:74:2e:31:7c:cf:41:2a:f3:da:
b4:00:a3:14:50:75:f4:67:aa:e1:16:7e:63:0c:23:20:4a:bc:
14:83:bd:76:5f:fa:a8:31:4a:01:4d:d4:53:e7:2e:8d:33:02:
80:fb:05:84:c2:95:f4:72:d8:67:80:79:fc:19:7e:74:c7:95:
4f:ba:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:23 2025 by rpki-client