Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: r/DHiaQxjNivtL7ozJx8EKVzfDZjb2iVELYQiDXRmgw=
Subject key identifier: BE:F8:F5:82:39:EE:14:91:46:5F:28:E6:AC:A6:7A:54:08:7F:C0:CC
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0199FCFD5104B06C32E9BB952595BDD32C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: QzUVRemfdwlKFVN2aT+rJ3793RiXi7LOAqtD4q5xgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:51:04:b0:6c:32:e9:bb:95:25:95:bd:d3:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=bef8f58239ee1491465f28e6aca67a54087fc0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:38:a5:31:2a:7d:7b:d0:05:6e:01:9c:ce:
f7:13:6a:8a:6f:aa:c6:c2:2a:fc:ca:a9:70:35:be:
9f:63:5c:0c:e7:cd:f0:d9:62:e7:8f:f7:88:a3:3f:
78:8d:13:15:cf:a0:e7:6c:b6:bf:0f:11:63:f3:de:
0a:2b:59:07:31:8e:40:0b:86:6a:90:52:a5:ef:df:
74:2a:0f:9f:66:0e:c4:ec:df:c9:67:77:24:f7:50:
dd:04:fd:c3:36:3c:23:1a:85:90:7e:41:ce:53:10:
8d:9e:54:d7:af:d6:02:2b:b4:5e:6f:c2:28:b0:ec:
91:82:6b:c0:01:24:e2:68:d2:bb:3d:83:e1:9b:4b:
35:67:e8:32:d4:1e:a4:b2:44:f4:f2:aa:f4:da:d6:
8a:35:ab:70:3d:42:bd:ac:5a:88:61:83:24:21:f6:
83:6f:17:03:17:b5:ed:f6:54:6c:8d:ed:9a:79:3c:
1e:d2:22:b0:95:21:ce:76:fe:fe:6a:1e:d8:f5:7f:
9b:e5:57:53:c1:80:22:f4:2e:a7:8e:d0:fb:ba:c7:
b2:4b:de:59:83:1f:ee:99:fc:f2:3e:e6:c7:6c:25:
5b:4c:45:c4:9a:18:94:96:35:01:7c:0f:50:45:cf:
bc:7a:a7:e5:44:0b:1a:a1:fc:62:5c:01:e3:0a:18:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:F5:82:39:EE:14:91:46:5F:28:E6:AC:A6:7A:54:08:7F:C0:CC
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:cb:52:76:bf:e9:54:3d:64:aa:52:31:37:08:c2:a9:cc:
d6:7b:53:36:e7:1c:6a:33:23:e6:03:72:c2:8a:75:31:da:1d:
a3:48:44:d8:fd:18:df:44:6a:62:ec:18:10:b2:a7:fb:70:78:
9c:08:8c:11:a9:db:a5:d9:ae:1a:91:25:49:1d:a0:ef:6f:59:
6b:1e:b8:c9:0e:37:dd:f4:42:1b:2e:76:90:12:03:41:8f:51:
27:9c:ff:4b:83:3e:fa:a8:71:99:41:e3:7d:02:62:db:58:46:
d9:b1:85:f2:7b:69:1f:9a:f2:e6:a9:b4:4f:a2:f3:53:cf:55:
f5:95:f5:c1:8b:83:7b:6f:54:83:db:b2:b5:f0:1f:08:d0:1a:
54:21:20:6e:5e:8a:66:06:2d:96:6b:38:07:f9:3f:1c:88:1b:
84:7c:d7:e2:f7:d1:09:c8:3a:71:17:e2:1f:2a:62:47:54:52:
73:73:8b:98:58:bd:00:01:e4:9f:8f:20:d9:1f:1b:7e:18:75:
9d:09:50:82:8e:3f:e0:ca:0c:f1:3c:01:57:7d:a0:49:9e:13:
f9:db:f4:28:10:57:ab:99:0d:bd:ae:49:3c:9c:96:24:9f:54:
c1:fd:03:c0:4d:11:44:dd:b4:19:cd:3d:5a:ca:46:2c:ef:5b:
ec:ea:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:15 2025 by rpki-client