Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: baH0moBgmCKWQdYy+P7rsqsFDaYaIHLCv2J7W8EOZnw=
Subject key identifier: 07:37:A4:0B:8B:2D:25:9D:35:37:F7:75:B3:9D:97:EF:89:E5:F3:70
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 0199FEB4A09809A97B9D529E0931C27C6867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:14 +0000
Manifest this update: Sun 19 Oct 2025 23:01:14 +0000
Manifest next update: Mon 20 Oct 2025 23:01:14 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: gAbxi+56ySdNVBSRaCzEUgQ7+feK9fpOeWTEvpf1+W0=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a0:98:09:a9:7b:9d:52:9e:09:31:c2:7c:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Oct 19 23:01:14 2025 GMT
Not After : Oct 20 23:01:14 2025 GMT
Subject: CN=0737a40b8b2d259d3537f775b39d97ef89e5f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:99:dd:96:96:25:f9:96:07:cb:03:93:b0:
64:ab:d0:23:12:81:2c:50:5b:a6:f5:5b:6a:30:00:
47:6d:dd:3a:a8:d6:3f:ce:a4:f6:3d:18:e9:8d:62:
72:05:96:6c:bb:17:68:19:f6:8a:86:28:36:71:e9:
b6:bc:32:4d:28:e2:1b:9f:93:ce:ee:d2:e0:e2:4b:
4f:88:46:d3:01:bf:3a:91:e9:be:4f:20:40:9a:b2:
ba:3f:6b:50:e2:41:96:0e:7b:4f:1d:39:a4:1f:73:
01:27:3d:5c:35:a1:0b:67:91:cf:73:3c:54:cb:6f:
aa:db:94:8a:18:61:25:13:b4:43:d9:02:c6:4a:ca:
fc:f0:71:22:3e:6d:1f:ff:1a:96:ca:ef:25:1b:65:
80:5a:fd:0b:7b:47:ac:72:7c:2e:55:5f:8a:9a:2c:
36:21:95:85:ec:e5:4e:91:bb:ad:c1:80:cb:be:f0:
c3:20:c3:c0:38:ac:04:a5:1c:0b:a2:1c:0a:c6:7b:
2f:9e:01:a4:12:77:dd:ce:a3:64:2e:64:48:62:91:
e8:56:27:98:60:e9:ab:51:6d:ff:56:af:08:86:e1:
b8:ff:bb:15:7e:cb:2e:9c:2e:22:77:21:4d:15:b6:
95:af:45:5b:e3:7d:b0:b2:22:92:93:17:c2:77:7f:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:A4:0B:8B:2D:25:9D:35:37:F7:75:B3:9D:97:EF:89:E5:F3:70
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:92:7d:75:08:20:f9:23:3a:ed:6d:63:7c:4f:f6:3b:52:69:
c0:6f:80:83:66:f5:db:0a:6c:d8:d3:dd:d1:de:f2:91:d3:aa:
ff:a6:3f:40:d1:ee:bd:41:02:14:09:9d:64:85:6a:7f:71:1b:
09:2a:cd:03:3b:6d:4d:8b:2d:db:f3:e4:b4:9c:f2:f5:25:ae:
54:32:2f:2b:29:31:aa:8c:35:83:7e:75:5f:2e:9e:96:e5:ad:
e1:66:c7:cf:a1:a8:df:6f:66:a8:b0:6f:a2:49:66:ef:39:57:
49:6c:75:1d:82:e3:a6:8f:ab:8e:64:49:0c:4e:54:c7:36:c6:
6c:f5:ca:a7:b5:bf:fb:63:c9:85:01:38:cf:dd:9d:0f:30:a7:
ab:ca:a6:f5:2a:86:38:d1:b6:ce:ea:b8:53:c7:f3:0c:83:71:
59:35:5b:96:ba:82:0f:e9:d8:2f:cf:bd:0d:5a:8c:45:1b:30:
65:18:b9:f0:ef:b3:db:70:fb:11:85:66:ca:85:33:eb:96:0f:
6a:f1:8e:4e:b1:51:33:d1:5f:a7:f0:55:d7:50:6d:bb:14:1c:
cb:07:28:e6:93:28:12:91:c1:ce:d9:95:9b:8c:ce:20:c6:8c:
dd:93:e0:bd:3a:6c:35:d4:9f:f5:76:53:ec:a9:d9:22:97:2f:
45:c1:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:58 2025 by rpki-client