Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: N7paQLThLX9atujtncX2Co0yeg0BQ5Ygxlc/cI6rmzw=
Subject key identifier: 7A:E3:2E:80:82:4D:6F:49:D8:13:18:DD:06:F8:F8:4F:15:3B:DC:EF
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 0199FC5892360D94E21CED93F052BABE9D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: 2Eu7Bm4MUdmo2Xcb9c3N1tiZ2+oaCGeuf89niBBY2Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:92:36:0d:94:e2:1c:ed:93:f0:52:ba:be:9d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=7ae32e80824d6f49d81318dd06f8f84f153bdcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:94:a5:fc:be:77:90:64:95:2e:c5:30:06:
fc:23:76:80:70:7f:3e:4f:2a:7d:2a:0b:cf:c3:76:
d6:de:cc:78:90:9d:59:cd:8e:ba:c2:9c:87:0b:98:
0b:f3:6e:b4:ac:56:b4:49:80:b6:88:29:60:24:bc:
7c:7f:eb:53:3e:08:60:25:08:05:0e:18:95:b4:81:
f5:77:8d:0d:fa:4f:a7:3c:33:13:63:58:1d:e3:e6:
f4:29:61:ac:c8:d2:dc:17:f3:91:f1:ca:8d:da:89:
bc:58:10:c1:de:e6:23:7c:f9:13:00:d5:e4:51:90:
1d:7a:5c:46:ce:1e:f0:53:0b:70:8a:73:ee:b3:8d:
c2:c2:86:7d:3a:4f:32:cf:6b:2d:d9:29:ad:62:f7:
65:df:e4:f6:00:6c:62:59:93:10:ad:94:63:0f:38:
cd:eb:fb:ac:f3:28:c0:fe:a3:66:a4:3b:26:fc:21:
61:2f:89:19:c6:18:5d:6e:37:3f:3c:ee:32:8e:ca:
68:84:f0:8d:7c:62:93:b9:76:59:b7:1b:49:55:42:
94:e9:24:d6:e0:79:2a:d3:ea:1a:72:81:69:bd:ca:
86:d8:c6:92:6b:ef:b5:7a:c8:5d:ec:d0:da:95:c2:
f2:c2:ae:27:8f:cb:29:75:e6:d6:16:44:15:a9:9e:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:2E:80:82:4D:6F:49:D8:13:18:DD:06:F8:F8:4F:15:3B:DC:EF
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:69:29:af:b6:c1:31:0a:06:d2:76:8c:44:23:1a:11:42:62:
cd:47:7a:00:90:11:85:64:4e:1b:e7:ef:36:72:85:94:c6:fd:
65:1e:75:87:ef:ca:1b:c2:15:35:9e:5b:bf:77:36:f8:8d:03:
62:94:2b:9d:cc:99:7e:b5:e5:f6:3d:53:95:24:df:00:72:47:
78:4c:4a:83:b0:72:72:bf:3c:79:7b:fe:27:b8:12:24:d7:c8:
12:42:ec:9b:b6:3d:db:b9:71:50:0d:7b:d1:2f:82:c8:92:28:
0c:f5:b6:89:55:c9:19:9d:fa:43:83:25:9e:e6:20:78:e9:b8:
da:82:1b:95:bf:97:d4:7d:94:50:58:ba:d7:9d:5f:ee:50:16:
c7:e3:86:69:5e:8c:f4:02:c2:0f:97:fd:0e:59:55:78:ac:3b:
1f:21:9e:f5:5f:1d:6f:17:0a:b6:cd:47:66:68:8f:91:36:e8:
29:43:1a:75:e3:d5:3c:48:0c:17:1f:ac:48:52:45:08:19:fa:
3b:c2:46:0f:c9:6a:08:c5:93:e2:3b:d2:13:fd:22:38:7d:44:
49:53:ab:82:72:64:c6:a0:90:09:60:50:96:64:81:07:8e:89:
f2:19:23:ce:ab:e8:56:74:9f:ee:6b:ac:18:c5:ad:12:46:7d:
a0:c9:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:15 2025 by rpki-client