Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: D4zmrlfUByCDO7Kgk/jdFTaW3xvn8IOcRPzsxvny1xM=
Subject key identifier: 4C:62:17:F2:A1:72:07:4C:62:0C:5F:3C:A3:69:80:06:C9:EA:1B:D4
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0199FE105626C05D90EBCD171CA398370F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 20:01:47 +0000
Manifest this update: Sun 19 Oct 2025 20:01:47 +0000
Manifest next update: Mon 20 Oct 2025 20:01:47 +0000
Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=)
2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: vtZyD1DdiVt8xRId9aXBrd74z+U3LFXnXFHu6IFcxdY=)
3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:56:26:c0:5d:90:eb:cd:17:1c:a3:98:37:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Oct 19 20:01:47 2025 GMT
Not After : Oct 20 20:01:47 2025 GMT
Subject: CN=4c6217f2a172074c620c5f3ca3698006c9ea1bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:95:a6:de:44:e2:fe:01:16:b8:eb:ef:98:
59:57:e8:59:82:ec:2e:5b:c5:12:2f:f2:4d:a0:5e:
a6:7a:4f:8e:20:0c:9d:2f:fc:f1:8b:d5:f9:5a:a7:
9f:3a:c7:00:5c:de:cc:19:2d:22:89:c5:f1:a8:46:
9b:a3:db:dd:1d:6f:03:54:65:d3:4a:8e:52:52:ad:
23:d2:24:24:20:e2:a1:3d:68:33:78:0b:b0:bb:b3:
d8:0f:bd:38:f1:ce:59:53:c8:10:2b:7f:ef:14:f1:
2c:86:e3:aa:76:e5:d1:4f:a1:39:e7:22:ef:7c:23:
ff:44:a1:5c:d5:94:53:3a:5f:fe:12:e0:9b:00:43:
e8:a8:65:36:5e:4b:c3:25:23:fd:8a:40:47:d4:ff:
9d:f4:ba:01:32:3b:c3:cb:e5:c5:2c:48:f8:cc:1f:
6c:f9:05:8a:5e:ee:2e:03:99:85:06:3c:de:01:45:
53:c9:d6:91:15:1f:b7:58:f0:3a:18:1e:ff:b3:23:
af:10:a9:4e:49:f2:88:13:f7:49:04:9e:0d:2d:6e:
99:a9:fa:45:6c:24:64:f4:ca:37:e8:a4:db:5d:48:
7b:80:7b:d8:2b:6e:c0:4d:e2:90:47:39:d5:11:4f:
cd:35:b4:bb:e4:1d:57:bf:f4:93:f2:01:34:2d:b9:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:17:F2:A1:72:07:4C:62:0C:5F:3C:A3:69:80:06:C9:EA:1B:D4
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:34:9a:bf:7a:bc:24:ec:2e:dc:6f:83:60:8e:31:0f:40:
74:fd:b9:7f:ef:02:1a:fd:65:cc:bf:ed:9b:5e:a6:da:77:5e:
49:ed:b4:d4:04:c3:63:62:cd:fe:90:9c:0f:1c:28:1e:96:dd:
8e:66:cd:27:13:b3:c3:b4:86:6a:08:fe:f2:bd:f0:85:11:62:
6f:59:12:48:6f:71:c7:de:9b:93:73:c6:5b:92:fa:13:86:13:
71:8a:ad:f2:1b:ff:82:60:23:9c:a6:30:9a:00:da:79:b7:be:
0a:7c:66:bf:ec:93:b1:18:d3:74:d6:e8:9b:ce:8a:ca:fa:cc:
81:99:43:26:fc:27:6d:18:47:22:b1:2a:e2:ff:00:cd:c8:c4:
a4:21:59:c9:dc:95:7b:42:59:fa:a1:59:6c:51:43:95:59:0b:
dd:d0:6d:80:98:1b:c4:c3:13:69:1e:e5:4f:1d:01:5b:68:2a:
67:67:1f:43:e2:91:1a:ba:72:5b:7b:94:fe:6f:63:de:c6:36:
44:98:2e:64:44:dc:2c:99:fc:d6:ae:23:83:2a:7d:91:b6:da:
9d:f6:65:41:54:02:38:ef:51:4c:dc:af:60:dd:09:69:ff:66:
23:40:08:dd:6d:75:af:f2:ba:33:d0:e2:e7:3a:0d:43:76:f2:
1e:66:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:18:05 2025 by rpki-client