Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: PLQX7UNE4Xfbqx30oW9wORbtKFybIqYfUchN/dOsCKo=
Subject key identifier: 4F:B1:00:CB:DD:08:2F:E1:88:99:96:17:65:20:2E:9B:5C:2A:CD:FD
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 0199FDA1D1972CD1C2EFF736154917700660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 18:01:04 +0000
Manifest this update: Sun 19 Oct 2025 18:01:04 +0000
Manifest next update: Mon 20 Oct 2025 18:01:04 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: Jtg2yiHcJBueHd2D3OcGQUrvkoUR2ceS5IfODYq6vYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d1:97:2c:d1:c2:ef:f7:36:15:49:17:70:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Oct 19 18:01:04 2025 GMT
Not After : Oct 20 18:01:04 2025 GMT
Subject: CN=4fb100cbdd082fe18899961765202e9b5c2acdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:58:90:9d:c9:b7:37:eb:5f:11:95:02:63:
30:15:d9:c7:ef:54:b7:ad:68:41:76:a3:c9:d9:23:
e8:dc:c5:9b:26:73:28:01:6c:75:dc:52:00:3a:ed:
87:e2:f6:ce:81:cc:38:c4:f7:39:cd:98:4e:6c:e2:
9b:f7:e4:9a:ba:e6:e3:59:78:94:ef:9b:99:85:a2:
bb:57:bc:b8:6b:7a:97:fe:e6:a1:66:ab:07:8b:98:
c2:59:ab:4a:bd:96:54:37:8d:3c:1d:b3:4c:40:63:
38:af:d5:92:01:6d:68:ae:bd:0d:ee:0c:6e:50:18:
7d:48:e4:a3:a0:ba:f9:90:d9:cc:05:bd:bd:86:aa:
f8:9d:e4:5e:cc:65:aa:25:a7:ae:de:42:17:8f:74:
09:18:a3:16:b7:5e:97:65:d7:25:70:05:94:34:ec:
38:a6:fe:0b:78:0c:47:9f:9e:67:9d:10:be:8a:c5:
fd:ad:64:94:d9:5f:4a:2c:83:e6:ea:51:0e:61:b5:
3b:81:43:43:93:c3:b8:9c:f8:d3:ec:bf:67:e1:a3:
ec:8b:af:a4:bb:30:f6:01:36:4a:70:c8:e6:e0:2e:
6f:ba:0c:24:26:87:4a:bc:54:38:58:ca:53:65:04:
55:b2:4f:cc:17:a1:4e:7e:aa:b4:01:96:33:e5:91:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:00:CB:DD:08:2F:E1:88:99:96:17:65:20:2E:9B:5C:2A:CD:FD
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b7:37:cb:ad:b2:fa:19:75:7d:34:ec:35:c8:9a:04:33:a9:
a8:9a:1c:97:3c:aa:be:92:6e:1c:cd:bf:91:d8:59:0c:82:98:
85:ea:28:3a:31:bf:c9:9c:e7:02:a1:9f:d4:08:dd:13:ef:90:
10:bb:2b:c5:76:dc:28:aa:19:34:8b:b1:d3:11:51:48:7d:2a:
06:54:ba:ac:dd:12:e9:bd:2b:6c:c1:14:d2:5a:76:18:73:d8:
4d:8f:0b:7d:10:23:72:6d:65:80:a0:63:50:95:d2:da:3c:96:
a7:8d:a4:78:3f:4a:42:6e:e4:8c:a7:40:e8:57:8c:b1:19:e5:
cc:0d:07:3e:c4:5e:f8:6f:4b:b2:03:9b:06:15:da:2c:49:15:
2c:cc:ee:5e:b6:79:71:41:04:f7:c2:2a:0f:a5:29:6d:68:6a:
46:63:1a:db:6e:1d:62:6f:05:1b:55:ff:d6:52:97:8f:e8:63:
20:33:d8:dc:86:52:47:7e:2e:d8:5b:84:2d:5e:01:3a:de:88:
f1:f1:f5:4e:a6:24:67:5d:87:8a:75:ee:59:2c:fc:ca:3b:7c:
e3:7d:e2:4e:7c:43:bc:75:dd:c7:83:2a:a6:0f:4b:64:72:0d:
a7:60:8a:01:3f:cd:d2:88:9c:1f:09:7a:5a:ae:3c:37:8c:f9:
8d:02:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:27 2025 by rpki-client