Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: sMH+kCs+aWh+QdVdn31jvjby6PbUIwsjQAwnQdsyco8=
Subject key identifier: B9:2A:5A:76:8C:1F:34:1E:5A:B1:88:80:41:A1:E0:74:65:31:FC:9D
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 0199FC58641B6B968BABD192DF505330D0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: ZRg/JvlDcadEGmT9f1NQdeGBXZa4x2fbtYKMVB0Js20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:64:1b:6b:96:8b:ab:d1:92:df:50:53:30:d0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=b92a5a768c1f341e5ab1888041a1e0746531fc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:d9:27:d5:4b:7f:24:a4:69:f0:14:cc:82:
41:17:6a:dc:9f:6b:d1:ad:15:af:b3:db:1f:53:4a:
a2:89:99:76:4c:65:1c:e6:69:9c:cf:1a:61:76:0d:
43:cb:71:5a:a7:b5:c0:9d:37:ef:c1:f1:0a:a2:58:
fd:27:ab:b4:94:de:b6:99:ea:91:9b:8e:ac:6e:2e:
67:59:75:5f:63:bd:4b:ef:a0:34:07:7c:49:09:6c:
4c:42:3c:4f:88:02:4f:2a:7c:25:7d:36:a4:85:61:
ef:fa:d6:8d:7f:50:b6:3f:b5:5f:f2:e9:e2:66:42:
22:96:ed:9f:c7:6e:e0:18:42:78:f8:23:d8:f6:35:
bc:d4:83:bd:ae:5e:d4:2e:0a:17:95:be:9c:95:39:
64:37:0b:ae:0f:19:e6:60:6c:78:92:b8:85:d9:44:
4e:d5:21:4c:9d:b4:1a:9f:50:df:2a:7a:c0:31:0c:
d2:f3:b9:eb:ca:76:31:37:ee:f8:d3:85:3b:51:e9:
40:57:75:e2:4d:ac:e8:7f:e1:fc:82:7f:46:c9:f7:
ee:33:fc:fc:54:3e:7d:9e:f1:81:9d:6e:7c:d9:98:
db:7a:9c:f1:92:32:f9:63:39:5c:9f:55:10:e1:9b:
42:d6:fd:3f:b2:ee:2d:47:cd:b1:5c:c8:ac:d4:1d:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:5A:76:8C:1F:34:1E:5A:B1:88:80:41:A1:E0:74:65:31:FC:9D
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a2:43:a9:16:ed:8d:7a:a0:15:c1:9d:7a:7f:64:1f:06:80:
c3:f7:ec:0c:be:fc:ec:7d:05:1f:7f:ae:2e:05:27:78:bd:a1:
0a:2c:1a:f3:72:df:5b:1e:ba:9a:8f:a5:7d:e4:29:b9:df:4f:
c8:06:a9:77:c1:5b:65:34:78:3d:eb:1c:26:a6:e2:3c:49:7c:
ae:e9:08:e9:d8:81:e6:a5:aa:c7:19:1c:9c:86:8f:6d:0a:00:
d3:f4:8e:fc:a4:d4:0f:7c:dd:a8:8b:15:2d:b4:58:83:85:a0:
bb:53:cb:be:7c:1c:a7:9d:1e:0a:a6:99:8c:71:29:47:bd:62:
c8:4c:2f:fb:e1:03:5a:10:c6:e1:65:89:67:22:46:ba:8b:e0:
4b:50:26:b9:02:93:9f:4f:df:98:bd:4e:db:27:eb:7e:b4:81:
1a:2a:e4:b1:2f:fe:a3:da:13:e2:d4:12:59:de:7f:5b:86:0f:
c9:11:76:35:0f:1e:37:a4:ef:19:e6:7c:ec:f8:db:59:7a:bc:
67:31:d5:20:b3:25:54:c3:19:c1:52:ab:9c:af:77:97:bb:80:
28:ff:d5:10:57:00:a9:e8:3d:77:96:f0:98:6e:ac:cc:37:de:
e6:b6:79:29:78:3e:4b:6a:a9:89:da:66:4b:ec:38:12:eb:f8:
a7:22:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:21 2025 by rpki-client