Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: LA9GFKAsenGVWd38e4SLOibrjTYEIpEukLmNIiqWP1w=
Subject key identifier: D5:F5:33:D7:D4:78:04:8B:76:E4:E1:DB:41:FA:72:62:FF:D1:8D:BD
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019A7293DA6494D2A310C925704E5B2C23D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0E0C
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: lQgj3qdxocmZXsMNxmaPgWMflgCWLLqYKUrrmHXhK8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:da:64:94:d2:a3:10:c9:25:70:4e:5b:2c:23:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=d5f533d7d478048b76e4e1db41fa7262ffd18dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:b3:e2:40:fe:9c:4f:cf:c5:02:76:b4:9e:
f7:e8:0e:44:41:17:fd:b0:65:0a:3e:74:d0:b0:e7:
53:5a:26:f6:df:0e:3d:c8:f3:10:26:aa:34:35:78:
fe:8e:8b:74:60:e6:75:49:14:2d:8c:9c:fe:82:c8:
7e:8c:b4:51:a9:a3:d6:cd:7a:44:ae:52:a6:b2:07:
fe:0c:b2:0b:e1:31:c1:20:1e:47:d9:8b:e2:37:1e:
6f:2b:80:59:6e:15:3f:92:18:7f:3a:14:87:1b:20:
da:9e:04:a8:df:07:76:22:df:0d:7e:29:53:9a:18:
c9:0d:a2:75:12:d6:06:4c:c3:a2:61:d5:e1:43:26:
88:6d:c9:a7:e0:5e:ad:85:3d:d7:7f:5c:9f:0a:92:
d8:c5:fc:9b:0c:1e:4d:86:b4:45:fe:60:34:44:f0:
77:e0:ea:1d:24:fb:f6:db:f4:58:c3:f6:3b:ba:06:
05:bd:a7:a4:ab:9a:33:1f:21:62:9e:d3:3a:7f:b5:
ff:70:fa:5c:fa:a2:c0:57:12:46:53:79:a9:ed:ef:
3e:15:c6:45:bc:62:ae:5b:92:d8:99:e0:7b:d3:bc:
c5:90:1b:28:89:12:20:65:1b:1f:33:59:cb:e7:7d:
1a:11:d1:1d:63:64:08:1b:74:d2:43:6b:59:c4:14:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:33:D7:D4:78:04:8B:76:E4:E1:DB:41:FA:72:62:FF:D1:8D:BD
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:54:19:02:84:64:26:18:70:2d:41:04:a7:7b:50:99:7f:15:
c1:74:01:22:10:04:2d:ff:53:ad:fe:fe:90:5d:7e:fa:a2:d2:
de:27:31:0d:84:ea:ea:6f:bb:ea:d1:c1:5e:8b:8b:d5:d9:9a:
75:10:39:bf:ca:ec:cf:9d:c4:c7:f6:a3:6f:b4:fc:cc:c8:d4:
eb:dd:7a:23:47:01:4e:93:f2:5c:91:3a:be:77:df:dc:55:fb:
95:0b:24:79:c8:f8:a7:55:9e:35:b8:1c:3b:26:29:cf:26:0c:
22:73:6d:dc:ca:10:a9:f3:e5:f2:a7:ab:67:99:27:6c:7c:62:
9d:36:38:bf:c5:71:76:ef:44:c9:3b:ff:b7:c0:6a:d5:21:1a:
39:c4:87:7e:9f:35:83:46:00:ab:1b:c5:6e:ca:ba:1c:c0:e1:
06:d0:a9:18:1c:ce:53:3c:f2:94:c2:53:a3:d7:12:8d:28:cd:
8c:fb:45:e9:a7:73:3f:4e:2c:af:4b:02:0f:ba:20:6f:7d:63:
76:f9:d5:dd:9a:af:11:fe:e8:c1:d0:9b:cc:76:aa:96:48:34:
a1:ce:9a:e1:c3:12:f1:20:a5:57:43:8d:aa:87:b5:69:4a:1c:
87:06:af:35:fe:3f:7d:55:31:4c:63:0b:16:96:d5:f9:86:21:
dd:42:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:38 2025 by rpki-client