Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: LEFNflNLwrpK4bCs7tbd2yXFqWLNv9I+N1QCkzSUXiI=
Subject key identifier: 47:AA:35:01:3D:10:C6:0E:31:B2:D3:1A:5C:A0:8A:C4:7D:5F:BD:13
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 0199FD6B588335C51A3F67EB28F460FCCEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: fThN2dY0vt3efXTZ5cRCgZ0wnO4ucQbp39225bOHGZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:58:83:35:c5:1a:3f:67:eb:28:f4:60:fc:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=47aa35013d10c60e31b2d31a5ca08ac47d5fbd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:ea:95:da:fa:f7:3a:fa:31:18:c4:8f:b3:
7e:04:7d:89:5a:76:90:00:15:44:0c:2b:4c:43:54:
03:54:02:b7:6b:42:d8:ef:aa:46:56:00:6a:9f:a7:
8b:90:5c:ec:53:52:14:01:68:e7:e4:c3:be:ea:0f:
2d:a1:6d:0b:f2:bd:63:db:58:d3:02:7b:8c:28:32:
8a:80:a0:75:64:e2:8a:78:41:7d:c5:57:fd:7c:22:
7b:35:5c:4a:71:38:e9:fb:a1:5c:3c:16:87:7f:c2:
a9:12:8f:d9:e9:06:f3:c8:6f:f1:88:42:f2:75:0e:
b0:cc:88:ea:38:2e:fb:72:b1:d1:d5:cc:19:75:f8:
49:32:72:c1:94:2d:38:68:22:c3:af:7f:ff:dd:a8:
69:e2:80:74:31:2f:70:a5:5b:a7:af:e8:f5:49:06:
4c:59:ac:6b:9f:3c:e2:b8:97:c0:e2:f1:5d:e1:7c:
51:d0:48:c8:59:9b:97:4c:db:65:1d:d7:d7:1f:89:
81:3f:a0:b2:1c:5a:0b:6b:1e:47:9f:0c:7d:83:85:
74:fc:77:77:50:00:cb:28:e3:27:56:7c:1c:98:1a:
68:bf:e9:30:40:6c:d8:fa:67:48:b5:c4:b2:c0:28:
f8:61:9b:50:0c:89:d1:11:f0:88:05:2b:de:ff:d2:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:35:01:3D:10:C6:0E:31:B2:D3:1A:5C:A0:8A:C4:7D:5F:BD:13
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:de:68:4c:7a:7c:4d:70:b8:c9:6d:24:62:a8:57:dd:90:18:
dc:ea:8f:74:8b:b4:ba:8c:41:27:25:f3:e3:4c:3f:bb:ea:f7:
e8:a0:28:7f:32:37:06:9b:ad:b9:15:f6:98:f7:76:4d:06:e4:
64:c0:18:42:97:65:35:d5:7d:a6:4f:20:c5:56:86:f6:c9:98:
b8:e3:17:13:bc:51:9d:63:53:7c:7f:99:6a:7b:f9:07:2d:b7:
cb:46:e0:34:8b:e0:46:28:7d:91:9c:69:b9:d7:8e:26:ea:fb:
95:02:ed:57:78:28:14:5d:e8:38:55:4b:01:05:bf:b4:53:c5:
fc:32:5e:5c:ac:dc:a6:f3:cd:78:5b:69:93:7e:fb:bb:00:88:
ae:fd:d6:4f:2b:43:b1:c6:e2:ff:fd:6a:48:99:df:f6:46:22:
56:30:2e:78:3b:04:8c:f1:57:57:44:49:9e:a5:bf:07:89:30:
fa:0a:b8:13:86:82:2f:f0:bd:36:a1:ef:ed:fe:45:68:45:81:
02:b6:fa:64:85:8e:a3:a4:c9:22:f2:ec:81:81:40:fc:a7:64:
79:9d:04:fb:b8:26:81:d6:5a:f7:a1:b6:c6:f5:56:8c:4e:26:
78:9c:94:b2:3b:7c:92:46:2a:67:1d:76:1f:d0:d9:19:9e:36:
44:99:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:00 2025 by rpki-client