Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: V2szCUPhJUX1FQEOLIq8evQ/BuvpN2VNW1pPKLLR0cg=
Subject key identifier: CC:8C:41:0A:76:CF:2F:07:58:9E:3A:5F:77:E9:2A:E7:2B:5F:65:C0
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0199FDD910FA2EA5B669710890EC3EB888EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 19:01:25 +0000
Manifest this update: Sun 19 Oct 2025 19:01:25 +0000
Manifest next update: Mon 20 Oct 2025 19:01:25 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: bP8GrLNDCzSUca/zMTzjqQ/PkGygDnk1mVB02l7Q8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:10:fa:2e:a5:b6:69:71:08:90:ec:3e:b8:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Oct 19 19:01:25 2025 GMT
Not After : Oct 20 19:01:25 2025 GMT
Subject: CN=cc8c410a76cf2f07589e3a5f77e92ae72b5f65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:75:2c:a8:21:61:fc:cd:d9:b1:c1:b6:5a:
eb:39:9c:b5:9c:e8:cd:50:b8:b7:b0:c6:c8:58:9b:
d4:9d:24:d6:c7:0e:eb:1d:fd:2a:56:a8:5a:d0:f1:
af:df:93:98:f6:0d:c8:b7:b8:83:39:f7:78:a0:67:
1a:ab:a8:61:68:b9:85:71:57:a9:c9:d9:aa:15:a5:
73:f2:67:7d:0c:72:eb:7f:6a:28:4d:5e:78:13:2e:
ff:4c:d0:ab:67:a3:32:0a:85:a1:21:e3:37:7a:50:
0a:c2:a4:47:34:62:c0:84:12:99:a3:ba:70:1f:b7:
6b:a5:6e:2a:1d:ee:ec:de:5b:29:63:0a:d8:db:6c:
4d:16:39:65:c0:0d:d6:7e:9f:e2:70:a2:89:87:ea:
50:b4:22:3f:c9:f4:cb:49:bd:f4:b3:ac:66:40:1c:
7b:74:38:bd:36:3c:ac:32:c7:a4:72:6c:0e:7a:0e:
08:8b:b2:5a:93:2a:eb:7f:25:76:7a:a9:d1:97:a2:
f7:8d:f1:c1:7b:02:fc:6c:e1:bf:1e:a4:0b:4f:91:
7a:51:ba:ac:a6:e6:82:bd:02:35:e8:37:a1:c0:40:
28:6c:cc:cf:0d:98:f6:0d:84:4d:7a:6b:3d:fd:11:
9e:aa:ca:e2:af:fe:90:5a:db:0a:79:02:b7:51:87:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:41:0A:76:CF:2F:07:58:9E:3A:5F:77:E9:2A:E7:2B:5F:65:C0
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:ce:b3:50:7e:56:ac:c3:0e:bd:85:47:4d:0d:6f:81:d8:
a4:61:05:23:09:b1:dd:be:da:24:c2:df:bc:92:cb:c7:51:09:
eb:54:9a:48:24:a8:27:95:8b:81:04:37:98:2d:6b:05:67:1f:
af:90:8a:41:50:9a:10:92:24:ad:6d:fa:ae:06:b6:da:c0:55:
0a:cf:08:00:29:97:03:87:17:fb:1a:9f:8c:d9:dc:39:bf:9b:
38:d6:41:b7:75:29:4e:ce:87:ac:3b:10:d6:77:f2:e2:ab:91:
c1:f3:2d:06:9f:9d:87:25:7c:2c:0f:55:20:f3:b7:27:91:63:
14:0d:49:29:fc:45:c0:15:08:a6:6b:f4:fa:c0:61:2a:38:a5:
7b:72:79:19:1f:b4:d2:6f:57:d0:c0:0e:9a:02:5f:f6:0e:7c:
a1:40:ee:a4:c3:72:62:31:23:95:f3:31:0b:63:f0:c8:92:f5:
cb:98:10:c9:c8:98:98:76:7d:96:5d:c3:53:0d:46:b7:6a:f8:
c8:b8:45:86:38:7b:bb:a6:62:34:7b:c6:a5:c3:3a:0c:2f:4a:
a1:c6:bb:9e:1c:24:47:f8:ed:5d:6e:c2:98:12:4c:ad:bb:de:
f1:10:23:74:80:70:d1:7d:81:cb:0a:a7:6d:fd:cf:ad:c2:b4:
27:6a:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:53 2025 by rpki-client