Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: sd4mtaOW95426saXk6AK4pQeNbhkWIHjcL8bnjmZhj4=
Subject key identifier: 21:1D:FA:AA:1C:79:0D:1B:38:BA:39:39:ED:F9:B3:A4:58:B3:D8:83
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 0199FDDA22D87CCECADA4CC8A0654BE000F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: qL+zWAdb7vByK1x1X/m3H26ruS7Vnwa4eKZNuOnkG20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:22:d8:7c:ce:ca:da:4c:c8:a0:65:4b:e0:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=211dfaaa1c790d1b38ba3939edf9b3a458b3d883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:36:7f:2d:a2:35:a7:5a:21:04:42:7b:24:
32:3f:56:65:14:cf:fb:54:8c:87:cf:5e:98:1d:6b:
ba:d9:8a:af:d3:93:0b:f9:c2:54:8c:98:67:87:3e:
70:4d:ce:8b:3d:c8:b2:3a:26:77:20:b2:f3:3b:ba:
e9:38:6b:1e:8b:d3:16:64:ce:93:04:cc:be:d4:20:
79:bb:1d:eb:00:65:70:06:d6:f3:a7:4d:f6:2a:02:
7b:cc:54:21:58:5f:76:e7:7e:30:61:9b:42:2b:dd:
80:84:67:0a:02:6e:54:73:9f:df:cc:04:55:b5:8e:
cb:d2:64:39:04:08:9b:f4:0b:79:49:29:b0:ee:5c:
de:10:26:89:e1:ee:3e:84:0e:2a:ec:0e:2e:37:c0:
75:64:0e:da:e7:0d:24:3c:75:1b:04:4f:67:a0:38:
48:02:2d:9d:8d:e0:80:9b:f7:d4:1a:01:5d:61:c8:
5a:11:ac:a4:fb:22:75:85:4d:80:18:c7:9c:cb:35:
61:41:92:6e:52:0a:60:9d:c1:31:98:1b:ab:ad:d5:
2c:64:f2:5b:67:1d:3a:5a:55:02:cc:74:7d:3c:e4:
62:eb:58:cc:cf:4b:50:26:10:33:eb:f6:1d:ae:4a:
ff:1f:eb:18:d8:21:17:43:84:e6:ae:df:2d:3a:07:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:FA:AA:1C:79:0D:1B:38:BA:39:39:ED:F9:B3:A4:58:B3:D8:83
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:a7:88:76:fe:56:69:5f:ba:01:7f:71:8b:59:95:d5:80:
76:22:6f:25:21:1c:9a:23:0b:60:33:4a:63:fb:40:4c:2c:1b:
48:77:44:25:ed:b8:ae:88:53:07:7b:01:58:ea:25:4c:af:46:
b4:79:b4:e8:b3:9f:1c:13:00:42:f3:7b:7d:d5:75:03:c1:0c:
59:0e:ee:99:6c:5e:08:f4:2e:e4:8e:32:64:07:8e:1d:90:06:
c5:a9:0d:0a:84:43:af:01:d5:bc:19:90:cb:e4:a3:92:24:b9:
bf:c2:14:49:f5:a7:01:7f:66:53:91:d8:18:47:7c:e8:fa:b9:
06:68:03:d8:78:49:ef:97:e7:59:3a:53:e1:0f:68:ec:d0:c7:
56:13:a7:ca:63:9f:18:9e:6d:93:1b:c8:e7:07:32:a2:e8:a8:
90:0d:65:2e:14:66:c3:bd:71:a1:2a:13:5f:0e:66:89:b8:0a:
37:68:ef:fe:ad:0f:65:f3:0c:69:72:44:d7:e4:e1:f0:1e:07:
d3:1c:5a:e9:8b:01:85:ec:db:e3:7b:57:47:ad:93:fc:a0:1f:
91:7b:1a:7c:0c:01:61:60:db:96:f8:c4:8c:d5:59:ee:c1:b2:
91:11:79:c2:f4:6b:b4:b1:a8:88:83:85:2e:5d:5d:54:44:68:
0e:53:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:56 2025 by rpki-client