Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: 3uZKqgqv1SEfTUFG905AljuZoQYvMcB1hMluk0Ev1BQ=
Subject key identifier: 9C:51:E0:DE:C0:0F:76:EA:CD:E4:41:50:36:7E:F3:06:8F:64:D3:84
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0199FD343BF50F05657D0C6A3E7DF604B8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: PDx4OYDoUFQ2cE3mkEgv9jQdq+NiBcCi7+h3spVZCB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3b:f5:0f:05:65:7d:0c:6a:3e:7d:f6:04:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=9c51e0dec00f76eacde44150367ef3068f64d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:6c:ef:ae:66:23:87:e9:54:53:56:a8:69:
84:cd:b0:02:a4:ed:03:d4:ab:19:75:b1:91:f8:bd:
87:be:82:a1:47:48:75:55:8e:75:6e:a7:2c:30:b9:
02:36:1c:0f:d9:de:44:9e:7e:00:9b:07:93:4c:3e:
f4:f4:2f:d6:40:cc:2f:9e:35:e3:6e:fd:07:69:b8:
e8:9a:32:32:e1:20:2f:72:d1:ee:15:c7:c5:db:c1:
b7:96:d4:42:3c:b8:5f:92:9f:75:0d:80:b7:d9:c3:
38:b3:c6:5f:d2:52:94:ef:d5:8d:31:d3:50:c9:8f:
d8:d3:00:3d:47:b4:59:7e:a5:f6:5a:78:35:98:a7:
4e:ab:88:1a:0e:20:76:10:3e:91:99:33:6d:65:f4:
4a:6c:84:37:f0:48:0e:23:35:9f:23:76:43:30:e5:
31:ef:2e:93:f7:4d:81:8f:70:26:f2:23:6b:12:e1:
74:33:22:6d:ff:46:7c:14:af:ae:b7:4a:73:b9:8d:
82:bc:88:4f:06:87:a3:c9:46:61:bd:7e:a2:15:6b:
60:d4:3d:0f:6b:ae:88:ab:eb:bf:cd:de:26:aa:26:
a2:f3:55:c7:2e:0c:09:97:12:f2:3c:3b:3e:72:16:
35:29:cf:6c:01:5d:33:7d:c9:56:9a:45:c4:d6:13:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:E0:DE:C0:0F:76:EA:CD:E4:41:50:36:7E:F3:06:8F:64:D3:84
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:be:86:ae:e3:26:b2:fd:29:a0:ea:1c:6e:3f:82:ba:d0:53:
a4:ea:bb:64:c6:cc:8c:50:90:6c:74:94:41:b6:e0:6d:71:42:
b8:30:54:88:77:30:41:3e:d5:d8:d7:fc:f8:0b:3b:0b:f6:17:
3b:79:5b:4b:fd:47:3f:bb:46:04:33:fb:d8:76:63:3a:fd:65:
58:d1:8d:d3:d9:88:f1:58:f1:36:d2:7f:ae:12:63:d6:bd:20:
0e:20:9e:a3:a0:66:a8:5c:3e:ed:42:ab:e3:57:0f:72:b2:d4:
7c:da:62:c6:ae:9c:e5:6e:1d:21:7e:0d:c2:bb:d6:8c:40:2b:
67:33:f4:14:8e:57:7b:3e:d9:db:9e:60:ea:2b:68:4a:41:f8:
9e:53:d5:77:8f:a9:ab:2e:83:eb:55:4a:3f:55:07:03:f2:64:
97:e3:da:9b:ec:b8:08:cf:29:8f:6f:80:31:ea:8a:43:17:79:
78:a4:c5:ed:df:2f:03:85:69:95:7c:c7:70:b1:83:c6:32:03:
bb:ef:e9:3b:92:3f:45:eb:ee:f7:d6:55:51:d1:52:8f:b0:e7:
4d:6a:d4:d3:d2:5e:29:5a:5d:ce:c6:b8:28:ba:20:ac:1e:1f:
49:00:c1:5e:d9:0a:00:91:cf:e7:f4:7d:ad:a6:e8:52:67:1e:
2a:5d:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:57 2025 by rpki-client