
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: f1ElZ9Sb16p852LzwDqJTJxjfjpSDQ+HF4j+/xCjZs0=
Subject key identifier: A7:8B:E7:E2:AF:F8:E5:DD:F1:36:0F:41:68:B7:48:E2:48:BA:20:C8
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0199FBEADA094F7AB3AE33AFF99C09CF70E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: nUcj1gusq8b4CKr1Sa1H3IkJi0zqFHTBNoPfhD5sflY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:da:09:4f:7a:b3:ae:33:af:f9:9c:09:cf:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=a78be7e2aff8e5ddf1360f4168b748e248ba20c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:a2:8b:24:d6:bf:2e:c4:7d:36:e5:40:3c:
e8:5b:d6:6b:dc:00:ed:11:5c:ce:34:67:65:fb:2e:
94:00:76:61:1e:8f:03:68:03:7e:27:92:80:42:06:
34:c6:86:97:8d:55:4f:68:ce:e0:bc:94:8b:9b:1c:
1f:92:08:43:3d:d0:e3:40:a3:b4:43:c9:51:93:54:
c2:9f:6c:0d:41:6d:53:47:99:1c:28:31:7b:26:14:
57:96:bf:4d:a3:fd:7c:4f:3e:f3:93:96:0b:ff:d2:
24:19:80:58:b9:15:f2:ab:b3:12:1d:6f:22:b8:13:
31:57:09:93:3d:71:b0:6a:59:10:42:e9:9e:dd:64:
1d:45:34:6f:03:88:f6:bc:14:48:80:ff:91:67:8b:
76:de:58:ee:67:ee:a8:80:3a:58:2c:da:59:27:2c:
78:48:a9:ee:06:37:c4:02:cb:3c:17:af:b3:e7:ca:
21:4e:8f:19:58:92:56:2f:f2:3f:fd:77:58:84:51:
a5:6f:43:23:a2:04:1c:75:f4:4e:53:91:08:80:78:
b9:18:85:42:27:8f:1e:0b:76:86:d3:2b:79:cf:dd:
53:bf:38:2f:b9:39:29:0c:cd:4a:d8:40:46:71:3a:
52:e4:5e:e6:7a:55:32:04:5f:70:ba:6a:94:0b:5c:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:E7:E2:AF:F8:E5:DD:F1:36:0F:41:68:B7:48:E2:48:BA:20:C8
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:36:f6:cd:11:3e:6c:21:b6:13:f8:f7:35:22:7c:40:43:
03:0c:c1:bc:48:d1:9c:55:1e:d5:91:99:d8:7e:25:ef:32:36:
ad:79:2b:45:d6:69:d8:be:8b:73:55:d8:43:ad:bd:56:dd:9a:
c4:59:79:88:ea:6b:78:ba:81:82:ae:1c:bb:43:58:71:bf:ce:
6f:d1:ee:33:cf:df:60:db:0e:87:38:81:dc:47:8e:a0:92:7e:
af:6f:d0:09:3f:48:33:ab:21:3f:bd:87:f8:3d:02:a9:72:7e:
ed:c5:41:fd:da:be:e2:1e:a1:12:11:46:3c:a5:40:50:73:1d:
de:a8:3e:ff:e8:6f:91:1b:9d:26:84:8c:cd:39:24:3d:be:70:
3a:0a:13:44:ff:13:eb:c0:66:94:74:6d:47:98:0b:fb:49:9e:
72:4a:3e:34:51:19:36:66:de:ac:57:ce:2f:3c:5e:79:9e:e2:
b1:e0:8d:3a:dd:3b:66:84:08:8e:31:e1:37:7f:da:34:d0:b4:
96:96:18:7a:6a:02:a6:b7:74:96:89:bd:c8:a6:c9:4c:25:46:
b1:2f:b8:1e:8b:06:99:db:90:03:66:ff:a9:96:a3:c5:b7:d1:
cd:a5:ea:13:1d:6e:f0:2f:45:9f:37:30:7c:d9:d3:e3:46:58:
f4:d9:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:10 2025 by rpki-client