Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: 1CtNgupWwLw6o9wXruo6jeCW2WnguMLJ2oWJLIIqhKI=
Subject key identifier: 70:2E:B4:1F:66:8B:50:1E:6C:F1:70:D9:C4:7D:A1:31:7F:9B:A2:0C
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 0199FD344A0D53B39AA9F026B891F4714FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: +ZDUmsvJOUQZwTftlegs0XRab9VkRXok2oR+a3u6UVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4a:0d:53:b3:9a:a9:f0:26:b8:91:f4:71:4f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=702eb41f668b501e6cf170d9c47da1317f9ba20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:86:47:3a:12:6a:86:e8:69:fc:f4:67:e3:
0c:94:b3:35:82:5d:e8:83:47:0e:16:85:58:4c:46:
7c:3d:dc:17:4f:d7:e6:34:24:1e:cf:26:9c:6a:2d:
b2:43:c6:64:17:7c:85:3c:bd:4e:19:4b:c9:8a:be:
25:42:44:11:9e:37:bd:66:ce:7b:7d:a1:0d:89:05:
f0:ae:66:11:fd:3e:06:6b:33:65:ee:9b:ea:cc:47:
bb:d2:b7:0e:d5:fb:3e:a3:e6:4a:99:6d:15:a5:c0:
2a:d9:15:fe:98:75:6d:59:7c:f8:1b:f4:9a:fd:8d:
8d:bb:30:44:e6:23:5d:87:25:47:b4:38:b8:26:92:
1c:19:fb:8b:81:8c:97:44:6b:26:b8:a1:24:91:0f:
5d:09:7b:6b:fa:a7:f1:e3:88:92:aa:b8:f3:b0:b3:
ad:2e:01:37:06:53:e2:eb:71:d3:18:db:91:64:42:
9b:1e:88:90:f7:b8:22:3f:8b:d1:c0:87:9c:0d:8f:
12:5c:f7:f4:8d:4a:ef:da:6a:49:eb:69:53:67:73:
36:9c:cc:1f:99:1e:31:b2:74:5e:06:6e:a0:dc:7a:
17:48:c4:bd:2c:62:48:48:5b:0a:12:06:c1:96:64:
19:2d:c3:cc:4a:47:a1:9a:31:ac:e6:18:56:66:a1:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:B4:1F:66:8B:50:1E:6C:F1:70:D9:C4:7D:A1:31:7F:9B:A2:0C
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8b:65:82:da:66:f9:37:fc:34:59:83:8d:d9:d6:2d:5e:04:
91:8c:f7:ff:b6:98:ef:66:7b:cc:75:5b:90:7d:ce:fd:5f:05:
35:ce:e1:8d:b3:03:29:7f:95:a0:b5:e0:73:ca:db:5b:c8:fd:
37:15:34:0f:a0:23:43:85:91:df:99:59:9e:1d:1b:53:ea:be:
d4:2d:3c:02:19:86:0e:76:5b:cb:b9:85:2d:fe:e7:f5:b0:e6:
19:2d:f0:8a:dc:19:6d:6a:c2:23:5d:14:36:fe:9d:5c:7c:a9:
92:1c:29:1d:0a:97:a9:32:28:b6:6d:f8:5e:69:ec:7d:48:98:
da:dd:1a:2b:35:88:8f:4f:57:d0:db:13:e4:03:da:44:63:d4:
50:08:09:58:80:fd:79:d9:c5:ca:85:99:74:6f:7c:5e:b3:55:
d9:bf:96:9c:3e:b3:31:6f:9f:be:da:2c:22:ef:13:05:ea:96:
a3:b0:fc:54:19:9b:82:2a:58:26:51:46:55:ca:1e:1d:4a:bb:
95:78:3f:14:bb:ad:04:64:72:2b:0f:69:e7:02:48:9d:37:78:
f4:24:b9:31:04:a8:d2:5a:3c:71:5d:7c:84:4f:69:65:f8:8e:
6c:da:20:2b:aa:0e:c1:fc:59:25:24:48:5a:48:8c:00:4c:32:
8d:8c:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:57 2025 by rpki-client