Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: qpRE3kSlVYzRFEVODCq6Pe5rALtTiBHsFv4fiTIZO1M=
Subject key identifier: 9B:11:96:09:FE:A8:20:D6:13:91:26:8A:15:0B:21:32:71:FC:A8:C4
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0199FD34880FDD35C82AA8D79B200A7BF099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 164F
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: gXk76hD1gc7PYjpqm0Z0FPblv7V+9AiDdCwT7ZBpXQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:88:0f:dd:35:c8:2a:a8:d7:9b:20:0a:7b:f0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=9b119609fea820d61391268a150b213271fca8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:68:79:ab:d8:45:de:1b:87:92:64:a3:35:
6f:c4:eb:b5:b6:77:d6:c4:7c:7b:c3:9d:17:f2:b4:
25:af:28:b1:74:fe:65:5a:15:ca:74:ba:05:c9:54:
da:75:2c:61:63:82:cc:45:dd:70:c7:f2:50:b6:26:
2d:6c:02:72:2b:19:77:f0:21:20:89:47:d7:15:66:
d7:ee:4e:73:8e:71:32:9d:65:80:02:f3:26:b5:f9:
68:71:7c:e4:7a:63:51:e4:61:35:c5:82:eb:dc:9e:
10:1f:7d:00:ff:2a:e4:69:aa:3a:41:77:e4:26:a0:
c3:30:45:d1:5a:9e:19:ab:e6:7e:9e:3f:9b:61:34:
79:68:37:a8:bb:b2:fd:f8:5e:fb:2b:50:aa:77:bc:
6a:bd:e2:7f:ae:46:70:01:aa:47:30:bf:7d:e4:3d:
88:e4:e5:10:20:11:33:1b:7a:1d:18:2d:62:93:c8:
53:9d:a4:24:7d:67:ee:06:13:c0:2e:fc:54:15:8b:
6b:37:20:d7:75:b6:dc:c3:e3:3d:4b:61:5f:aa:80:
c9:51:97:b2:0f:e6:81:ef:39:47:eb:a3:ad:53:7b:
68:b7:78:b7:bf:50:42:6d:fa:6a:46:fe:6c:a3:03:
d5:50:02:75:66:32:73:82:5b:3b:c2:71:a4:41:82:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:96:09:FE:A8:20:D6:13:91:26:8A:15:0B:21:32:71:FC:A8:C4
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:01:ca:90:8f:bf:24:58:dc:8a:26:35:37:ef:79:d8:ae:
21:00:1a:e0:e1:7a:83:bf:3b:67:df:40:0f:b8:73:07:b0:8b:
00:3d:7f:4f:b7:72:64:9d:97:23:41:38:95:5c:03:c7:93:55:
cf:5d:04:c6:54:a6:67:4c:64:7d:6f:b4:fb:9a:dd:77:cc:62:
c4:98:4b:ce:77:f9:31:3d:c8:b0:9b:2a:41:d7:e1:b2:93:f0:
69:65:ef:b9:6f:39:34:5c:27:12:53:0c:ff:9d:eb:d4:18:6c:
68:31:b2:60:2f:59:df:44:01:ab:39:a3:d8:08:e8:7f:1c:f1:
90:12:70:bc:40:21:46:2f:a7:0e:70:6c:5f:1a:09:b8:66:eb:
51:1e:95:31:69:1e:b6:8d:b9:71:d0:5b:19:40:23:d8:9b:0c:
e7:03:ab:9c:ea:95:cd:db:88:0f:2a:69:35:d0:78:9c:25:64:
62:78:56:a8:59:d1:1d:33:cd:f2:98:05:dd:64:ff:9e:c8:8a:
07:15:30:b1:d5:7f:4e:a9:d0:d5:a2:d4:f4:b9:5c:fd:47:92:
f6:99:ad:a6:c4:ea:dc:bd:a9:a4:f0:2c:45:24:89:c8:11:76:
5b:0a:88:24:4b:c8:87:1a:f9:a9:18:71:06:06:a8:27:18:4e:
15:f1:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:47 2025 by rpki-client