Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: ByAQjbDz965K+i/excw3R59cVmxcpDOhbbzvKZenUdE=
Subject key identifier: D6:67:0A:DC:98:8E:48:1B:3F:E0:EA:D6:F6:11:6B:FF:A2:B8:AF:08
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 0199FD344F1139E779263C0BF499264EDD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: SN44gSirWQZM5TPaQ/ARYGs8z10ARzxqNId+njYLh1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4f:11:39:e7:79:26:3c:0b:f4:99:26:4e:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=d6670adc988e481b3fe0ead6f6116bffa2b8af08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:3b:eb:3a:89:d2:67:30:46:19:e8:a3:db:
e7:71:3b:73:51:19:e7:11:62:eb:1b:a8:a8:69:94:
ac:d2:49:7f:ea:20:0a:53:9b:b1:b5:a6:f2:c8:5e:
6f:18:4c:33:fb:6e:f8:a5:20:03:d8:d6:e8:78:ac:
37:d1:a0:85:e0:ab:ab:a1:8f:df:7f:de:37:67:5a:
dc:a9:c1:6f:8a:1a:5e:de:16:a2:1b:55:68:ac:c4:
5c:6e:90:ac:9e:b1:d8:34:7d:bc:44:db:40:87:c8:
ff:75:75:17:62:c0:86:cd:12:bd:d0:19:ea:1c:aa:
28:73:54:54:63:48:7e:7e:a0:d0:1e:56:ef:60:c6:
eb:5f:88:f2:1e:7e:2a:96:ac:c2:17:1c:89:6f:31:
81:c3:fe:0b:4a:89:e4:a2:37:41:92:ab:9e:b5:11:
71:d3:94:38:6e:ae:44:9d:88:a5:fa:02:f9:78:59:
fc:ca:8f:29:1d:07:be:2d:64:80:9e:3d:95:1a:5f:
ae:3a:eb:34:71:83:9b:8a:d8:7e:0f:cd:24:6c:b8:
81:73:e6:44:4b:be:01:c1:f0:ad:90:5f:9e:af:ab:
74:e6:9a:0c:c3:c3:53:b3:5e:a0:cb:72:e5:c6:05:
78:39:43:cf:66:4a:a3:5f:af:1f:7a:57:ad:92:d6:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:0A:DC:98:8E:48:1B:3F:E0:EA:D6:F6:11:6B:FF:A2:B8:AF:08
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:f1:36:c1:a1:63:1d:e7:88:22:3d:5b:dd:db:78:43:ce:
7e:25:2c:52:4d:07:f4:d6:a2:c3:4a:a6:e5:b9:94:b4:94:55:
7c:98:b0:f0:00:c2:12:12:5a:75:6f:a7:73:37:93:38:45:37:
f0:30:4a:78:3e:af:e3:d6:d0:b6:4c:7a:ec:74:e9:00:a2:af:
cc:a8:3b:01:99:ad:cf:15:d4:a2:dc:e3:21:92:eb:1d:71:07:
86:d9:45:ca:54:18:3d:f1:48:ce:b8:ae:48:c1:ed:32:5a:27:
b4:6b:0e:57:de:79:72:39:ed:08:40:a0:0c:fd:b5:9a:3b:16:
42:4f:cb:23:a2:51:b0:89:4a:02:67:0e:ae:70:47:88:bf:78:
df:aa:02:d8:8c:cc:2b:1a:4c:10:a3:e9:bb:d5:7c:bd:2d:72:
67:e3:30:bb:0c:d4:75:ce:d8:a4:de:f1:56:d4:41:e9:b0:c1:
f6:0a:c2:2f:1b:28:46:2d:fa:95:24:5c:b5:1b:cf:c8:90:34:
cc:8d:61:86:71:d8:22:21:51:27:e5:15:5f:87:a9:89:60:fa:
3e:d0:4a:6c:4d:ca:ae:96:f0:5e:6c:62:74:92:85:c5:70:99:
4d:83:d6:c2:77:2e:f7:89:ce:bb:91:e7:50:7c:4e:81:c5:33:
89:31:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:13 2025 by rpki-client