Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: SaCNFDSuBs7ULil88FL6PlCgAPDO4ykWckRym+C4ZC0=
Subject key identifier: FB:5A:F0:69:68:06:34:8A:B9:E2:EF:E1:F7:04:AC:1E:0C:1E:95:02
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019A7149951C28BBEF5050F6213724794DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: W6G7EKw8+77dy1/JDTXMpCwYHJHz2c3hSqLINUkxHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:95:1c:28:bb:ef:50:50:f6:21:37:24:79:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=fb5af0696806348ab9e2efe1f704ac1e0c1e9502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:6c:0d:ef:cc:f0:ef:5a:f3:4e:c0:0e:2f:
8a:06:5a:a1:1c:6b:a8:8d:0d:1f:f5:39:cf:e9:99:
36:04:1d:de:35:38:98:63:5c:34:37:17:31:22:b3:
5f:77:9f:c4:55:de:62:b9:6e:22:ca:59:03:6b:ca:
7a:cd:61:ee:67:94:e4:72:7c:80:e5:49:da:9a:73:
d9:e0:0b:ce:ef:04:d6:0a:4e:94:e2:e1:7d:22:bc:
9a:c2:ec:f2:80:9b:78:ad:d2:68:55:3b:e8:ae:e4:
c7:61:ab:06:55:45:8d:26:76:45:90:c1:1d:f1:7a:
8b:c7:a2:e2:3b:2c:35:04:b1:1c:a7:82:a8:5a:47:
83:c7:02:b5:9e:ea:af:cb:df:5c:90:4a:c6:ea:44:
7d:64:d7:cf:8c:4c:85:62:d9:a3:22:88:a4:bd:62:
a9:52:da:0b:89:3d:c5:83:1a:0d:33:a4:55:2b:67:
be:5c:bc:65:55:7f:b9:b6:8c:28:e2:8d:f0:f0:13:
1f:11:4a:fb:00:e2:db:7e:ee:36:c4:b8:b1:b6:e2:
b6:22:02:9e:c5:cc:da:cc:05:21:a6:aa:02:0c:75:
32:7b:4d:1c:38:c4:fd:cd:ea:c1:ef:53:03:59:5a:
f2:22:23:12:09:a1:93:bc:f9:d1:0a:51:84:70:40:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5A:F0:69:68:06:34:8A:B9:E2:EF:E1:F7:04:AC:1E:0C:1E:95:02
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fd:6c:34:ab:8b:6d:2b:ce:e2:2d:91:4f:06:10:0f:64:c8:
db:bb:b7:8c:58:51:1c:71:1c:23:a6:af:70:9d:8a:53:b5:2e:
c0:0d:d1:1b:39:37:f9:5f:79:9e:01:65:06:75:13:73:c1:57:
e8:50:76:dd:2b:4f:d3:7a:39:df:06:7b:65:2f:59:f2:c4:f6:
f4:3f:a0:85:4e:e1:d9:8a:44:de:d6:f9:8e:af:d7:09:df:ea:
7d:f8:ac:bf:64:79:9e:36:f8:59:70:f9:2a:1b:b8:7b:29:28:
7f:2a:e5:49:43:87:3f:86:85:2b:af:8f:9f:ad:20:c7:c8:03:
df:8e:94:34:4f:0e:48:dc:3b:4c:34:d8:52:21:23:90:34:76:
22:6f:2e:19:90:cb:45:16:81:32:3b:e8:ef:50:31:43:94:8c:
e5:7f:96:fc:e6:08:e7:4c:56:c2:8f:0f:48:b2:65:b2:b6:01:
a8:d1:fc:18:4d:8f:82:3d:37:73:36:ac:98:a0:49:cd:34:cf:
c8:df:68:bd:ef:a5:1d:e7:80:43:79:70:bf:39:de:8d:65:a5:
2e:8c:63:c1:bc:4d:c1:2e:74:cf:b9:ec:db:95:07:ef:1f:91:
af:d0:e3:18:47:7e:14:ea:a3:6a:4a:7a:0a:f5:e2:47:72:90:
19:b3:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client