Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: MXdKxFiGWMx1D81D7IIzEMCOeuvdplSvsUIiXZxlkH0=
Subject key identifier: B5:DE:D7:44:92:50:F4:36:19:00:74:99:02:BA:C9:66:BE:CC:38:8A
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019A0447D89ABA5F38337830D1103000570D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 16E9
Signing time: Tue 21 Oct 2025 01:00:08 +0000
Manifest this update: Tue 21 Oct 2025 01:00:08 +0000
Manifest next update: Wed 22 Oct 2025 01:00:08 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: 3fg+PUw21R/EDhohkVQdcRUC00bifIvTJs76tDLUWW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:47:d8:9a:ba:5f:38:33:78:30:d1:10:30:00:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Oct 21 01:00:08 2025 GMT
Not After : Oct 22 01:00:08 2025 GMT
Subject: CN=b5ded7449250f4361900749902bac966becc388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:0b:5a:c2:2e:02:a9:c5:57:4f:23:cf:e9:
a2:26:ce:9c:51:6b:43:e6:29:b4:12:9a:0e:43:11:
c6:21:07:a4:48:72:a7:db:fb:12:56:df:b3:54:5b:
24:fe:11:af:19:7b:d3:a1:b0:1c:5d:49:c1:1f:12:
7a:ba:7c:fc:fe:57:f1:92:89:c3:a3:da:a7:61:8d:
0d:de:d3:e6:94:0f:9e:fa:6f:b3:aa:70:f3:87:52:
4d:b2:b0:f3:13:09:04:ec:a8:32:a8:79:36:2e:6f:
be:cf:7c:ef:cb:5b:a6:2e:1e:0b:73:66:b9:42:16:
da:2f:34:d9:75:3f:7a:9d:cd:e1:02:85:74:19:65:
fe:f3:67:35:64:38:85:e0:18:2d:ed:5b:31:5a:e9:
c3:97:98:09:2b:dd:fa:3a:81:01:c0:d6:77:15:07:
7c:3c:02:bf:3b:16:90:f0:2b:cf:f9:f3:87:9d:58:
e9:aa:f8:93:51:e8:8c:dd:c3:34:1a:c2:0a:85:c5:
d5:3f:77:10:83:7d:54:c0:76:1b:ed:61:14:e3:27:
7e:a3:21:fc:24:3a:11:c5:9b:1c:4b:cc:df:a9:a2:
49:12:da:c2:19:0f:ac:5d:be:6f:6f:8c:a6:6c:86:
86:1a:39:66:8d:d4:17:62:44:de:70:77:b5:cf:23:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:D7:44:92:50:F4:36:19:00:74:99:02:BA:C9:66:BE:CC:38:8A
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:62:72:8b:53:85:de:a9:29:cc:c3:82:ae:28:e6:7b:3f:
bd:11:cc:03:96:7d:a3:d1:d2:b7:f0:02:ff:d5:1b:c5:93:c1:
d8:3a:31:17:f6:9f:1e:82:e3:4d:17:04:2f:9f:9a:cf:fb:68:
86:fd:3c:78:ce:51:96:cf:fc:04:f1:f7:f6:eb:d2:08:a9:9b:
3d:31:4c:52:96:d4:00:11:80:ef:07:dc:30:d5:3a:e0:85:4b:
cc:36:e7:dc:06:1b:8d:fd:08:7c:a5:da:2d:04:6e:f9:1b:d6:
f1:bc:f9:38:c8:f0:07:69:85:42:ba:ea:7a:f6:7a:a2:31:3f:
59:15:f5:f5:e3:a9:7a:f7:74:2d:f2:b5:90:2e:9f:b1:74:dc:
e0:0e:4c:cb:f4:b8:b0:fc:57:0d:7e:4a:ea:48:04:d1:66:93:
fb:85:6e:dc:00:9d:3a:52:05:22:11:d0:a9:c3:d5:3e:8b:48:
63:8f:88:e1:fa:4e:5f:4b:20:69:e2:ad:d9:3c:07:88:0a:6a:
64:55:a4:54:dd:f9:42:30:8f:49:ef:47:75:86:ae:69:30:81:
ef:bb:7d:85:95:8e:04:af:3a:5f:60:59:2f:2f:44:be:f0:2f:
f8:cf:96:59:90:31:61:61:64:52:f6:7e:ca:c8:d4:dd:4e:61:
63:b1:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:19:08 2025 by rpki-client