Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File: XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier: N5e5ProIkEimPsPz3+uSaSimwzyAi6YZwsFZkfUJxTg=
Subject key identifier: 7F:B5:7D:8A:D6:6B:DB:FB:61:C0:2A:7B:00:FD:ED:3A:7C:F9:1C:63
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019A0147F00A65C55DA3BAFE26A62754FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number: 16EE
Signing time: Mon 20 Oct 2025 11:01:22 +0000
Manifest this update: Mon 20 Oct 2025 11:01:22 +0000
Manifest next update: Tue 21 Oct 2025 11:01:22 +0000
Files and hashes: 1: KGLhnOtOH4dX4vgy-roccfFwMa0.roa (hash: Q+cux+R5PAR0o25xtkFz855zy5Yln4wHE6v90utYbJQ=)
2: XIOxEKfk0L1hsSImSOzEtdwAjH0.roa (hash: EAwm98c0fkS4uhfe34Ly+0Co1dsy6rvufc8PCiKQWUM=)
3: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: X2F47uv7LxTFMk2gZpz4Qd40Q2vwXdXbe6Hx9MuIgtw=)
4: pjuwfv3bsHCpq2bUzmpShMFHNQw.roa (hash: Hy8/ILbDAQXBmLpCF9rnEz7CfpQmiaJg4wOv9IAGHBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:f0:0a:65:c5:5d:a3:ba:fe:26:a6:27:54:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Oct 20 11:01:22 2025 GMT
Not After : Oct 21 11:01:22 2025 GMT
Subject: CN=7fb57d8ad66bdbfb61c02a7b00fded3a7cf91c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:a3:5e:97:27:67:19:5e:d3:2b:95:a6:27:
bd:cd:b2:85:f5:8c:59:0b:c3:77:95:47:c5:b2:49:
44:35:95:e5:4d:a1:8a:32:72:8e:96:7b:c2:c0:50:
cb:1c:1d:72:f8:0b:c8:72:e2:0e:98:ff:9f:55:f9:
d0:a8:9e:fc:3d:1b:c9:19:f5:56:b6:f3:81:d2:59:
0e:e9:81:32:77:1b:eb:46:ce:53:fe:62:4c:22:0c:
6f:ad:89:a1:f3:bd:96:a6:60:61:75:e4:a3:46:a1:
be:1d:f9:72:e1:5c:15:1f:a3:e0:c8:a4:c3:76:94:
ea:2c:66:a0:f9:58:c2:6d:be:fc:dd:ca:89:51:37:
e9:ad:67:54:b2:8c:88:40:14:25:ef:68:5c:54:03:
85:bc:1e:57:be:34:84:2c:1d:eb:aa:0d:ab:7b:76:
e1:19:3d:9d:b4:81:e6:86:f1:46:2f:4c:08:96:2d:
84:be:23:f1:88:62:62:52:dd:27:21:3f:c8:b9:41:
87:64:22:c6:23:84:fe:d3:69:13:4b:e7:a4:4a:2b:
d8:88:54:20:8a:a4:a1:29:48:6e:b8:1b:e7:a1:b2:
33:68:f7:89:67:cb:49:69:18:3d:51:d4:a6:5b:88:
85:7f:5b:0f:31:7c:7f:10:b3:d8:90:8b:c4:fb:98:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B5:7D:8A:D6:6B:DB:FB:61:C0:2A:7B:00:FD:ED:3A:7C:F9:1C:63
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:da:ce:37:91:7d:29:0a:6a:12:31:0b:5a:24:e1:c7:89:
58:26:ab:8d:e1:d6:7f:84:5b:fd:79:21:94:42:4e:6f:8c:1f:
f5:f5:3a:61:ba:82:99:0a:5a:15:67:6f:62:c3:67:0c:ba:78:
1f:92:60:27:22:2d:12:15:18:5f:ee:fb:3a:5f:11:88:9f:5e:
29:a7:39:d0:d0:77:0b:a6:00:60:92:a3:a7:7d:74:84:39:5b:
fe:da:ff:e8:a6:70:95:93:06:21:b9:02:fa:47:2b:da:cb:b5:
f7:da:32:01:c8:26:a6:8c:3d:b7:70:1f:a7:18:31:94:60:53:
40:8d:f9:6a:b1:75:58:27:62:6d:23:e3:48:47:5c:75:c2:f4:
23:b9:2f:29:c3:f5:ce:b2:f4:56:f3:33:19:19:dc:63:20:3b:
53:4c:37:26:eb:6a:08:2e:54:8f:fe:46:34:28:06:7f:67:13:
c3:4b:bd:4a:1c:a2:04:0b:b4:7b:c5:70:33:bf:79:26:e1:3b:
11:68:04:b7:f4:b1:d8:97:4d:82:97:8b:34:c7:2d:01:1d:53:
21:2e:50:e9:17:75:db:88:eb:99:32:df:ac:e9:d0:7c:a2:fe:
7c:81:dd:fd:a2:55:67:18:5e:ee:34:48:0f:c7:fd:c4:91:05:
f8:d3:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:51 2025 by rpki-client