
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: 61HxrqqCk+6xAdSkUzALBXIKtnw5Y+vsGPFxUuuSyTw=
Subject key identifier: 46:6E:EB:1E:CD:77:ED:E6:1E:1E:75:91:2D:6C:6F:AB:B5:F6:DC:15
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0199FBEA7E0DF35075F73EB665BCA495175A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: Bv647BElENslcrQkst7U8VvbUPuYqSSipHTPy+iGBPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7e:0d:f3:50:75:f7:3e:b6:65:bc:a4:95:17:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=466eeb1ecd77ede61e1e75912d6c6fabb5f6dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:f3:84:43:38:d3:57:e2:30:06:43:30:38:
86:ee:0a:92:53:a7:e7:90:b8:11:30:72:13:93:1c:
3c:d7:49:c8:3b:d3:72:55:23:b0:97:f1:49:d3:30:
48:3e:e9:24:64:f6:31:9a:bd:ce:ff:99:32:26:2d:
b1:63:72:24:3d:24:01:3c:b4:25:6d:59:53:33:85:
4a:c6:3c:1a:f7:c0:3d:62:49:d0:9e:19:bc:96:08:
12:ce:5c:65:0b:e3:e3:63:ab:49:0f:93:af:8d:0e:
c1:99:a2:b3:2e:63:77:d7:fd:2d:67:98:b6:94:d1:
59:bb:4d:10:e2:88:4c:e9:7d:80:ce:64:ba:d7:32:
64:5b:b0:5f:ec:f3:17:43:6c:c5:d2:53:09:45:9f:
9e:5e:f0:92:5f:09:6d:80:a0:9a:a9:06:65:e7:be:
d8:0a:8c:f3:c1:0f:16:00:05:af:12:a3:f0:54:aa:
6c:67:da:6b:f5:46:1a:9b:57:39:47:0c:77:97:e8:
79:d2:41:45:a4:4a:eb:c1:33:12:3f:a5:e9:63:e1:
cb:ae:2e:94:28:11:5e:ac:42:ac:e9:d8:a6:dd:a9:
6e:70:be:df:4f:69:d1:8c:ec:27:8e:0b:be:d6:f0:
63:87:3e:cf:a3:fe:14:2e:dd:b2:11:af:8b:bf:a2:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:EB:1E:CD:77:ED:E6:1E:1E:75:91:2D:6C:6F:AB:B5:F6:DC:15
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:f0:c3:07:d7:7c:e5:53:e7:2b:a4:cd:89:40:d5:32:2d:
6c:22:09:fa:10:b8:b4:ee:27:bb:21:99:cd:a1:3f:f4:c6:40:
cc:ad:fb:12:96:1b:f0:68:52:9c:24:be:5c:b2:31:3a:5f:f7:
94:17:49:3b:a6:7f:74:c3:e7:6a:15:91:7a:41:0a:7c:7f:8e:
8f:ca:56:cc:78:f1:d9:fe:9e:6c:30:01:d4:dd:8d:92:29:bc:
3f:73:93:5b:d0:56:a3:ea:b4:ae:b1:88:e2:b1:36:22:51:f6:
fa:aa:aa:c9:0f:5a:37:5a:91:b5:16:07:e1:9b:74:46:56:af:
bf:09:cb:2f:7f:ef:37:5c:3f:c4:ea:6e:49:07:83:55:06:1f:
95:18:2e:ab:34:cd:b8:0d:1a:ed:86:03:72:6b:f8:4c:98:ea:
fb:1c:ee:7d:d5:7b:c0:8d:8f:22:b1:eb:f7:be:7d:1b:ad:b5:
b6:fd:40:d8:83:58:6a:d3:01:92:e5:82:42:16:40:e6:ff:7c:
e6:68:19:5c:84:4d:82:a7:41:88:a7:85:03:aa:d1:e3:88:48:
b1:f5:68:a0:0a:eb:c3:6b:ca:f1:1b:8f:26:25:71:90:fe:37:
55:cb:76:7e:a8:aa:f8:c8:19:a2:d8:e4:6f:1b:83:f6:cd:ba:
05:02:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:08 2025 by rpki-client