Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: uYTgNd11vjlh28fC9mdksDG6HArj+SpxmsWd7eI6Qxg=
Subject key identifier: B0:46:F5:FC:7D:EB:0C:85:8B:F6:DA:93:A7:0D:9B:5E:A0:5A:62:2D
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 0199FB7C9B3B8C3F69F24A17A3DB9BBC4970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: GiNUXVF1DH6zuNi8JsqrxxjnoRRmQqCv0GZ/u+X6pco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:3b:8c:3f:69:f2:4a:17:a3:db:9b:bc:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=b046f5fc7deb0c858bf6da93a70d9b5ea05a622d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:e8:87:37:25:f8:b4:2a:7c:cd:69:10:5b:
83:0d:21:bd:9d:e2:97:da:29:9d:e2:f2:ff:be:43:
88:3d:23:92:e5:29:63:53:80:0e:84:44:21:64:f6:
7b:f8:a5:a5:4d:f8:25:28:c3:bb:0c:dc:a0:26:e8:
6f:2c:34:71:87:ca:c6:14:dd:65:17:7c:8f:80:45:
10:05:49:52:a4:de:5f:49:c8:e8:2d:96:32:80:09:
5d:69:07:e0:ba:05:21:58:e6:70:cc:f5:3c:10:43:
61:5d:72:e5:43:b2:57:cc:dd:dd:bd:fc:00:70:82:
63:ae:d1:8a:a8:e9:e3:31:67:84:f6:bd:95:c2:39:
af:47:ae:40:7c:ba:ae:86:0a:ad:dd:82:1a:d0:e6:
32:c8:de:04:4c:06:c0:96:53:45:d2:0b:17:1f:9e:
0c:a8:1a:99:95:bf:ce:d7:a0:c0:36:06:7d:ea:4a:
8c:94:cb:a9:e3:ae:a6:f8:27:cd:53:9f:65:1b:59:
f4:19:46:34:a0:c2:12:d1:36:bf:ef:3d:b0:53:02:
fb:92:0f:38:80:fb:bf:50:50:50:08:ff:2b:df:7c:
86:d0:f8:8e:b5:66:4e:aa:92:92:25:66:a0:bb:65:
11:5b:0b:95:3c:9f:c8:fe:81:38:a5:9f:1b:c0:93:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:F5:FC:7D:EB:0C:85:8B:F6:DA:93:A7:0D:9B:5E:A0:5A:62:2D
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fe:6a:dd:c0:8f:be:d9:5f:1c:4d:63:a9:52:e3:7c:b3:57:
1f:7d:84:85:d5:ff:a0:26:12:0a:38:be:3f:95:c4:af:75:d9:
e8:53:a6:1c:b4:58:26:39:c8:8d:ea:9f:af:52:18:db:00:e9:
4f:f9:45:75:37:41:c5:43:bf:e7:5f:e8:0f:29:d9:26:65:75:
df:7e:cb:d2:06:eb:a0:ae:5a:59:b3:be:f3:a4:9d:4e:46:19:
ad:9e:e0:f5:f0:56:49:a0:f2:20:a6:d8:1e:96:00:41:13:4a:
3c:26:b5:bd:39:4b:29:3d:bd:b0:28:1a:8d:59:54:26:f4:41:
3d:de:8a:6d:a8:b0:11:9d:96:de:13:38:20:35:e2:38:75:66:
49:bb:06:6e:b5:04:26:a0:c8:e5:98:24:41:63:17:6c:7c:59:
91:de:e6:c8:5b:1d:30:8d:8a:50:27:07:50:78:fc:c6:37:7c:
7b:c1:7a:b8:e4:ff:c0:ee:2b:70:f4:6b:3d:d3:84:2d:1f:21:
89:95:89:de:98:5b:55:91:a7:50:10:7a:54:27:e4:43:1d:91:
87:c1:39:28:aa:b6:46:60:a7:fd:8a:3c:99:90:a3:ad:c6:37:
1f:d4:7b:db:0c:4a:e6:0c:14:8e:0f:4e:14:63:6d:dc:bf:f7:
39:82:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:50 2025 by rpki-client