Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: DFquBMZQBXMlPmywUkVJ/1jZkiOQs1anuYkPjdPnBDM=
Subject key identifier: A2:C3:2D:2D:49:8C:D3:FF:2A:4E:C2:B8:C1:08:FB:32:17:95:BA:98
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 0199FD6B069372B25DB46C541AF684FC5180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: dNp5Hnetd8IP076J5QLlw0X4fOaHK1nX4Q2mjCCiQAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:06:93:72:b2:5d:b4:6c:54:1a:f6:84:fc:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=a2c32d2d498cd3ff2a4ec2b8c108fb321795ba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:73:93:d9:58:16:b6:92:5d:03:f2:ef:fe:
e3:0f:ab:35:4d:9e:93:7d:50:89:ab:69:08:64:42:
b6:7b:94:28:23:5c:06:23:35:59:22:9c:ca:9f:b1:
a4:a0:74:03:50:d6:07:85:02:b9:76:85:39:4d:3e:
cf:02:48:5b:d7:79:b3:78:f8:07:41:42:2b:1d:ef:
92:2c:86:aa:b3:84:30:56:4a:ac:3b:ef:a4:03:4f:
3f:32:1f:46:24:e8:d8:90:57:27:6e:e0:b7:38:7b:
5a:e1:43:ea:c5:1f:cb:04:4b:12:af:50:c2:5b:f7:
ec:bf:2b:a1:5d:33:bc:b3:57:ba:30:45:86:8b:38:
6f:a8:08:95:40:d1:f4:f3:0c:52:1d:3b:6f:da:23:
53:6a:8b:27:6f:52:f5:2e:ab:09:fc:bb:2b:c9:42:
3d:70:e7:b1:98:97:69:3a:6d:b7:49:b1:29:b8:72:
13:f6:7c:2c:aa:32:de:00:46:63:74:15:da:c3:b7:
f2:ff:7a:49:e2:17:e8:93:4b:22:47:5b:b1:9e:18:
27:7e:b0:41:2c:63:f1:70:53:19:83:2a:bd:ad:30:
b9:86:27:4f:05:19:4f:c1:d6:ad:2f:46:d3:4b:29:
45:af:ab:6a:21:46:62:2b:c7:b9:02:03:27:3b:5a:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:2D:2D:49:8C:D3:FF:2A:4E:C2:B8:C1:08:FB:32:17:95:BA:98
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:9e:6d:6a:ac:5a:0b:38:58:2a:ae:c2:c6:46:d4:54:2c:
f7:7c:12:28:f1:36:60:9a:b6:b3:c3:a3:3e:bf:20:8b:66:e4:
b1:fe:08:80:ee:59:46:ce:ac:f5:70:fb:e3:6a:ed:36:91:ad:
d2:7b:94:b7:31:b8:e5:03:7c:7a:ed:97:04:c1:c7:36:30:b7:
6b:06:77:e6:56:33:6a:0d:70:fd:fc:dc:f0:3f:89:f0:4d:e8:
0e:65:62:45:ee:3e:e3:00:27:b0:4e:71:11:59:58:5d:3c:36:
04:a4:4e:a5:a5:7d:69:6a:d6:2c:52:cf:d0:96:82:d6:c8:c9:
c2:77:62:a0:bf:7b:54:56:94:ef:bb:95:8d:03:7f:ff:3d:32:
94:f3:d7:1a:a1:25:ea:bf:3a:b6:ae:19:a8:1c:30:41:92:22:
e7:b3:14:9b:ae:b7:1e:27:c3:5b:44:d5:11:e0:04:b1:4d:10:
ca:45:ac:b4:da:8f:5e:f3:a5:a8:47:61:07:ed:45:86:ca:12:
d0:55:64:3c:3b:5d:30:59:b0:d2:4e:92:5c:14:87:cf:c9:6f:
8e:ef:f5:d8:48:8a:1a:e8:de:c1:64:91:ec:cb:e4:84:c0:34:
e1:fb:60:55:1f:5c:42:5f:93:fb:ce:61:cf:8a:76:7c:05:98:
ec:16:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:52 2025 by rpki-client