
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: YkC/zWdJ3jW5nV00cfNHTSS58ctlvIZRVCBDnHBkx5Q=
Subject key identifier: C2:90:C4:07:7D:F5:64:C6:84:8D:EF:69:EA:AD:42:70:D8:CA:45:C7
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0199FC587288DF386773C7FDC07BB1F8317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: cfqdcjB+q414ujVbxmvOIN2U5IhxIpyXyuH9he7DXO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:88:df:38:67:73:c7:fd:c0:7b:b1:f8:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=c290c4077df564c6848def69eaad4270d8ca45c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:52:cc:46:ed:c3:1a:94:04:9e:54:f4:19:
4f:b1:35:09:50:f1:c7:25:c4:57:0b:b3:56:a3:e8:
fe:a8:88:ce:07:cc:b5:e0:de:88:8a:b4:e5:e5:ed:
4c:6c:44:ba:f4:27:25:a4:0e:83:25:5e:b7:3e:7d:
80:07:ac:12:7f:2b:0a:b4:70:48:ad:6a:35:ac:9a:
5a:df:db:92:dc:f9:e8:41:ba:99:78:e5:43:3c:c6:
9c:47:03:33:58:df:03:12:cd:96:84:c1:07:70:c5:
00:a5:ac:16:08:ee:54:e6:ea:14:01:d5:b1:b9:7a:
c4:2a:58:ce:ad:ee:e3:d4:84:c8:20:0e:4c:99:2a:
a2:95:d0:fe:91:33:77:3c:fe:2f:92:bd:38:22:da:
e4:e5:38:9c:e7:b3:ec:1b:32:69:2e:9d:b4:d0:1a:
13:fa:48:56:73:df:fb:59:17:31:39:21:89:97:23:
e6:6a:94:2f:a8:34:ca:4e:cd:93:69:af:f6:df:81:
2b:ce:9f:55:40:bc:8d:73:d7:bd:67:cd:dd:2d:e1:
62:9a:db:77:f0:f1:52:54:d8:a4:89:40:8c:00:44:
55:8e:7e:46:c9:32:85:8a:41:a2:2e:2e:b5:7f:12:
b9:05:d6:9f:0a:fe:c5:b5:61:5e:05:fb:ac:0d:b6:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:C4:07:7D:F5:64:C6:84:8D:EF:69:EA:AD:42:70:D8:CA:45:C7
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:8f:1f:23:f7:0c:b5:d6:aa:88:7b:8d:b9:51:49:dc:03:
06:78:3d:f0:3a:ea:e9:67:41:02:fe:11:68:3e:6e:38:9e:e3:
6f:ad:13:85:73:13:4e:8e:03:41:11:1c:8d:4c:20:45:8c:33:
2c:0b:2c:58:ce:77:ac:5d:81:e6:ba:fb:c2:b5:ee:7d:67:89:
b4:a5:e6:d9:62:76:fc:e5:0c:bf:2c:e9:65:1d:fb:15:32:09:
97:06:60:ac:33:90:bb:8c:3a:3f:68:cd:3f:7b:d4:13:ff:a7:
61:a4:74:73:fa:cf:e1:64:48:40:67:af:d9:24:ab:18:89:dd:
98:9f:23:e6:f1:87:90:01:4c:91:01:ca:0f:1c:25:eb:1b:ca:
22:7e:14:54:65:16:da:5a:be:d9:5e:14:5e:22:80:31:6b:91:
f6:44:b6:a2:38:41:e7:af:e9:8f:7a:57:37:eb:49:e5:7e:60:
ad:a6:4c:09:ea:27:71:a0:b2:60:6e:22:8a:80:4e:27:78:ad:
25:3e:47:8e:08:29:12:37:d6:77:e4:bf:d3:84:0b:d6:28:69:
14:c0:45:25:16:a8:8d:8f:4e:ff:3f:4b:c4:59:e9:c4:f1:e9:
38:b1:16:d5:22:f6:a3:cb:43:af:e5:24:a6:9c:95:68:3d:18:
fc:36:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:32 2025 by rpki-client