Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: Y2KeNc30CWWAYPLnKyhrqbrH6r8qbDPNqEh09LmF8Ws=
Subject key identifier: 14:2F:D8:56:A0:C7:D7:CD:4E:BB:9C:5F:10:C5:51:56:3B:D4:E9:3C
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 0199FFFEADB5E45619D2EA789786BE9390F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 05:01:44 +0000
Manifest this update: Mon 20 Oct 2025 05:01:44 +0000
Manifest next update: Tue 21 Oct 2025 05:01:44 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: 9xh35NWICPKZRjdZhEQefss3gSZhyueD1d1ZfDXh7Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:ad:b5:e4:56:19:d2:ea:78:97:86:be:93:90:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Oct 20 05:01:44 2025 GMT
Not After : Oct 21 05:01:44 2025 GMT
Subject: CN=142fd856a0c7d7cd4ebb9c5f10c551563bd4e93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:f2:59:5c:f2:48:f4:43:07:d5:95:79:cf:
a0:37:b8:fd:bf:c1:1d:15:7d:99:0a:45:44:44:ca:
00:70:34:a5:9e:6c:c4:42:fb:8e:b6:22:b8:6a:ce:
19:2b:e9:41:74:09:fa:59:62:d4:c9:47:e0:88:33:
fe:10:24:5b:44:e0:b8:e1:be:61:f1:cb:c0:44:1d:
25:f0:7b:0e:35:28:b1:3d:cd:fe:13:01:61:4e:92:
ca:a3:51:4b:a7:b4:2b:d0:ae:b6:05:b9:72:d9:a8:
97:31:19:d8:87:27:75:84:92:f4:82:b5:38:17:b6:
ce:b6:a8:dc:34:39:f9:c3:f2:3f:2c:50:20:d8:16:
03:7b:ef:99:98:7f:f3:2d:43:58:38:c5:89:ce:a8:
42:aa:28:00:37:8c:d3:61:d5:23:7b:8e:20:8c:df:
ab:2b:8a:92:bc:db:eb:67:ee:85:f5:d3:88:1f:45:
b2:6a:34:57:c6:7d:96:f3:48:0b:db:19:d1:c4:da:
b0:2b:44:83:4c:f1:4a:84:a1:cb:ea:93:0c:34:2a:
19:6a:84:3b:81:26:4c:e1:bd:fb:77:45:ed:dd:88:
df:64:3e:d4:07:32:e2:4b:d6:7a:32:94:4c:52:c3:
2e:01:43:0c:2a:36:d4:6c:22:ee:93:10:31:c5:8c:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2F:D8:56:A0:C7:D7:CD:4E:BB:9C:5F:10:C5:51:56:3B:D4:E9:3C
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cf:4b:cb:b6:43:36:fa:22:69:4b:fe:29:75:b5:8a:f8:b8:
73:25:41:88:cb:77:02:40:b8:17:64:02:a4:fd:67:be:71:e4:
2c:43:d3:30:db:93:c6:6a:e7:6d:60:82:18:58:e1:0f:e6:77:
d7:da:94:7c:3b:25:4a:3b:96:cb:75:ee:5d:d9:dc:bd:20:55:
fe:80:37:c6:e8:6b:a2:b1:6e:8c:d4:fa:b2:ce:93:7b:8a:39:
15:73:7f:94:1a:3a:7e:06:41:0c:6d:fd:0b:88:31:89:3c:7a:
8b:07:9c:2f:ad:a9:65:dd:d5:ea:ed:76:05:c5:7c:0c:5c:7a:
69:7c:e6:e6:e2:1a:56:67:58:f4:e9:6f:a9:de:4e:22:66:3c:
cb:de:46:5f:5d:ce:c1:bb:f1:68:ea:c2:91:bd:70:09:ca:ac:
68:fb:e8:1b:5b:11:56:77:b4:84:1b:26:2b:b3:48:ba:7a:b2:
0b:65:af:f5:0a:3e:2d:14:47:3a:0a:0e:cf:d8:d9:6f:56:f8:
01:48:ec:11:29:e4:25:9f:0a:88:f7:16:4d:b6:6a:12:25:6d:
0d:c9:fc:45:89:9f:34:2d:9e:ba:d7:1e:8e:dd:48:16:1a:9f:
c2:86:b6:92:d6:16:91:e6:f1:b0:8b:fb:77:e2:35:77:ba:4c:
d7:32:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:39 2025 by rpki-client