Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: zThMYepxS9a/0DZLPYz5yIZaOcgi0Z7em5bQ0l2dfZo=
Subject key identifier: F4:EF:EC:45:C5:5A:EC:1E:21:2D:F2:2E:EA:06:39:15:67:73:7A:7C
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0199FAD837D25EDDD377BD13F8B58DCCB906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 8vHMJCQ5R4GY2xFg8o6frrDRkMAatxPrjyzCZg+rPkI=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:37:d2:5e:dd:d3:77:bd:13:f8:b5:8d:cc:b9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=f4efec45c55aec1e212df22eea06391567737a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:5d:4c:be:3c:de:dd:7a:1a:18:8a:66:b6:
63:04:f2:79:57:a3:1a:c5:92:1a:bd:85:74:d5:c0:
ca:15:bd:3d:23:14:b6:a7:62:95:eb:9f:45:59:94:
55:4c:c6:bf:f8:42:6f:d9:d7:e1:50:9b:e7:c2:b8:
76:45:30:0d:cf:fc:d3:5b:68:fe:24:3b:d3:16:4a:
88:fa:89:ca:9d:1d:63:d1:a9:2e:22:a1:ff:2a:fa:
cd:5f:51:70:77:db:c8:bc:04:b6:dc:57:14:22:34:
9a:d0:17:32:22:e5:af:67:c6:5a:e8:3b:f1:76:39:
d2:2b:c6:6e:e7:13:2e:43:95:7f:2e:90:92:70:40:
8a:3f:d0:4c:45:d8:3f:6c:04:11:43:61:4b:fc:fe:
4c:00:6e:85:51:6d:91:a6:c7:c8:18:f4:98:42:08:
77:2f:fe:00:30:5e:49:78:46:f0:0c:7a:95:71:57:
66:15:48:8e:8c:b5:46:04:a4:52:e2:2c:51:4e:cf:
0c:c5:63:e9:6f:31:97:d9:f9:e9:46:b4:3c:6d:b0:
c2:93:08:72:c0:f4:1e:55:ac:c2:82:52:4a:e7:02:
07:03:0c:b9:19:bb:f3:2f:7e:d9:7d:d5:76:ea:b7:
f4:45:3d:71:d5:ae:bf:6e:20:7c:10:a7:58:06:f6:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:EC:45:C5:5A:EC:1E:21:2D:F2:2E:EA:06:39:15:67:73:7A:7C
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bc:af:dd:e1:87:4f:95:2e:51:85:06:0f:60:88:8c:ef:22:
d5:8e:2f:d7:9b:17:35:83:1d:5d:9a:e1:8f:fc:0e:71:e4:23:
7a:84:2d:3c:45:47:aa:37:85:42:10:1d:bc:c4:47:1e:67:8e:
6e:e4:91:a2:7b:d9:f5:36:66:9f:31:d0:bf:9d:53:3e:a0:98:
7b:86:74:0b:34:71:75:35:a8:e8:df:fe:6b:dc:4b:f2:0f:32:
fb:de:d4:cf:3b:e9:34:e9:52:c4:26:39:0a:14:6c:a8:1d:86:
70:80:fb:b8:bd:cf:45:9a:81:7f:49:6f:09:9a:c4:d6:f5:af:
e3:d0:0d:49:72:b3:96:b4:2c:60:cd:72:94:bd:56:73:14:52:
38:6d:b5:c0:be:ac:31:f6:ca:9c:43:6c:9c:0a:78:2e:b9:ad:
20:da:01:6f:c5:a3:e0:a4:07:b2:a4:0e:46:db:9b:4d:d9:d0:
45:0a:5c:1a:cf:a1:27:2c:38:0b:b8:0c:a4:f4:f8:85:87:ff:
91:bd:41:06:c1:08:21:4d:d4:7c:e7:2b:df:a2:82:5c:cd:83:
58:18:44:20:fc:2d:a5:7a:47:95:4d:e5:a2:40:3c:95:0c:67:
b9:8a:7c:9b:e7:02:f3:74:3f:42:23:f5:e3:b7:38:2d:5f:9b:
84:a0:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:20 2025 by rpki-client