Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: fwdIDEVDqdtmT7K12rDzGypl1+eu2sMG/ap0IiRJ6RI=
Subject key identifier: CC:09:2E:73:C7:E3:70:E1:7A:20:4D:B0:8A:EE:16:11:B5:06:F4:37
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019A21AE1A22124F422480CDB4B0D7646369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0123
Signing time: Sun 26 Oct 2025 18:00:49 +0000
Manifest this update: Sun 26 Oct 2025 18:00:49 +0000
Manifest next update: Mon 27 Oct 2025 18:00:49 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: bOKL5fvivGVYeZHB9ysqCuPkPsYLFVx66OYgVMCFXPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:1a:22:12:4f:42:24:80:cd:b4:b0:d7:64:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Oct 26 18:00:49 2025 GMT
Not After : Oct 27 18:00:49 2025 GMT
Subject: CN=cc092e73c7e370e17a204db08aee1611b506f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:52:42:f8:42:f1:b1:5a:f9:7e:60:4e:12:
56:a1:f7:90:b4:84:d7:f9:ff:aa:21:0f:77:70:94:
0a:8f:25:77:81:37:c5:f4:f4:c9:a7:da:8f:11:a9:
c2:5c:cb:9e:c2:dc:9a:a4:c3:f5:c3:24:18:2d:03:
42:de:8f:84:a6:89:53:e9:fa:40:bb:f9:54:72:d9:
9e:cd:7c:4e:e2:ba:d3:46:4e:59:f3:d7:aa:08:b4:
d9:4b:0b:12:40:b5:f8:e9:df:25:a4:55:0f:c1:d7:
35:80:3f:29:c0:fc:6a:38:e0:e9:2d:a2:8b:fc:82:
09:17:c2:9b:46:45:3b:3c:90:78:03:d0:1b:8d:8f:
20:c8:fa:36:43:68:07:4a:1e:0d:c0:b8:36:be:76:
6c:88:37:57:24:c4:a5:f9:5d:04:f3:d9:f9:97:2c:
43:8e:16:3d:a4:45:85:fe:ca:61:35:a6:24:74:84:
23:e6:19:34:c5:d1:a5:67:e6:f1:69:f7:c5:35:60:
3b:2d:43:c0:a0:1c:d3:9e:ac:68:57:22:71:98:62:
f4:27:96:03:fb:ba:bc:70:f3:13:ba:b4:05:bb:0a:
1e:37:62:ff:55:b3:23:d2:7e:35:2e:db:70:02:b1:
09:59:e0:04:52:7d:f8:05:3e:3e:b4:35:49:52:0d:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:2E:73:C7:E3:70:E1:7A:20:4D:B0:8A:EE:16:11:B5:06:F4:37
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d7:ca:3f:aa:db:14:7d:83:96:de:31:40:f4:3a:cd:b3:af:
db:dd:05:fa:2a:06:10:f3:fe:7b:96:02:af:a2:1e:9d:cb:7d:
27:88:8d:a9:42:b8:8b:e0:1d:91:bb:09:db:8b:31:bb:35:74:
d0:af:25:a5:8a:21:02:8d:ea:8b:f6:83:40:9f:6f:51:34:db:
c3:12:19:bd:51:51:57:a3:8b:9b:af:ea:c9:7c:15:57:27:3e:
1b:a5:43:c9:be:96:89:39:5a:94:06:8c:08:a0:67:ac:f6:ad:
04:c4:35:35:55:3a:eb:09:6e:9c:8f:23:48:63:1d:38:8e:a9:
40:d1:4d:c5:0b:42:31:25:da:32:b2:79:03:a6:32:13:23:21:
15:3c:35:bc:5c:e1:46:4d:cf:aa:62:92:54:71:e3:84:17:ce:
28:ce:07:5b:2f:82:3c:45:0a:2e:02:54:08:9e:92:6e:81:66:
99:d6:80:fe:04:62:b8:08:ba:44:4e:ab:d2:8f:43:05:d8:75:
ea:4f:c8:6b:6e:23:e1:97:cf:9c:d5:07:d1:60:4d:f8:bd:f1:
83:79:09:2a:fa:b3:dc:d2:99:c6:86:d8:19:85:6f:d0:dc:8e:
69:74:38:a0:e1:c1:e2:92:83:e5:b8:1b:5f:18:c3:f6:d2:ac:
b2:bd:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:11:13 2025 by rpki-client