Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: HAAozPYHSWBTLeBd0yppy5vaswEpyq1h6xvlMmyRimk=
Subject key identifier: 4C:2E:1D:BB:D1:AF:76:F8:F3:2C:E7:66:D6:F1:D4:2A:A1:06:B3:07
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0199FC58C4849C34A5CE2F0DCEA7E462F10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: MVJYLFdmGJ8/3CuiRQYkk+IRrbqwF2g4vxT6uNLbnts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c4:84:9c:34:a5:ce:2f:0d:ce:a7:e4:62:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=4c2e1dbbd1af76f8f32ce766d6f1d42aa106b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:9c:bc:07:f8:43:cc:f1:2b:09:e0:c9:0c:
06:26:62:67:42:f7:38:8e:aa:7f:d5:d3:eb:a1:71:
22:e8:3b:fa:2e:d7:b9:64:d7:8a:c4:4a:33:e6:3a:
a7:5c:d9:2c:58:9d:ec:e6:e5:cd:3d:e2:c0:bc:91:
19:8b:91:09:78:e7:61:02:3f:4e:ed:8f:33:53:9a:
b1:97:f4:72:aa:eb:3a:ba:8f:2e:dc:e2:c7:ac:f6:
a1:55:f7:66:4f:a5:29:1f:fa:58:a8:30:51:41:de:
da:6d:5a:d4:47:31:af:eb:01:ec:f2:47:0d:f5:47:
74:d7:6d:15:c7:6c:0d:5a:8b:f1:14:72:2e:b9:0a:
4e:2e:19:a3:68:ba:a9:4b:81:fd:f3:ef:74:b6:df:
de:eb:d8:49:cb:9e:1c:f0:eb:29:ee:e4:60:33:77:
37:36:ce:a5:6b:e6:2f:84:3d:44:fc:b5:f4:19:c3:
66:0d:69:60:83:c0:fb:90:b5:9b:58:d3:97:31:98:
c9:ba:c7:1a:e6:86:a6:ec:40:38:de:6b:78:17:9a:
f6:d6:81:5f:d9:eb:37:7f:7a:93:54:c4:3b:89:3c:
bc:52:8d:a3:56:2e:d8:47:e4:11:4b:e3:fa:66:35:
7b:73:e2:bb:7e:a4:f1:d8:8d:d7:54:d5:6e:08:72:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:1D:BB:D1:AF:76:F8:F3:2C:E7:66:D6:F1:D4:2A:A1:06:B3:07
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:ed:8d:3c:dd:08:c1:7f:66:99:54:ed:8d:5e:55:f7:bb:
4f:79:e0:8e:ef:a9:f9:7a:58:68:05:13:9e:34:c7:84:b7:24:
7f:70:c9:a2:0c:9b:34:fc:15:41:67:c4:e5:08:3f:d8:9f:6e:
2b:d4:5d:a5:96:de:7a:c9:20:2f:c8:a3:e0:86:15:84:0b:f6:
3b:88:73:aa:3d:48:68:5f:a2:41:33:a1:81:d5:24:36:76:a8:
f6:35:39:46:a8:34:9b:68:37:18:64:fb:af:2c:d9:93:20:18:
79:d9:4e:b6:43:67:64:08:91:84:09:cb:c4:93:3d:68:98:13:
29:13:68:5a:ef:07:d9:e3:ad:95:3d:c8:f3:fb:b0:21:16:75:
30:bc:8b:10:9f:6a:d6:eb:6f:11:8f:dd:1f:c3:d1:e9:7d:be:
28:99:24:f6:69:bc:5a:23:25:48:46:b6:86:c5:86:2e:23:a0:
0d:2e:0b:eb:85:5b:f3:69:2b:56:ce:c3:5e:69:92:e5:ee:67:
92:65:69:4f:97:47:36:d5:5e:04:e8:e3:05:04:fb:4a:47:01:
2e:74:42:5a:1a:55:da:4d:d3:d2:94:b5:43:ac:26:12:96:69:
78:6b:82:60:08:06:43:d7:c6:fb:e0:dc:05:f8:66:d0:d8:00:
e5:0a:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:58 2025 by rpki-client