Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: lTB8xeaQAvQ8gZePnUCylTq/uA2hFY5SLffiHjBnCZ0=
Subject key identifier: 8A:C4:22:0B:68:43:A7:65:40:52:BA:8E:D2:8F:CE:09:38:2A:F2:70
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 0199FCC6160E4D90F262DFDC262359D76367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: gdTAXVhnYUlDsYkhk4gRZzbS/Cm8oR3afjHho7k4rrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:16:0e:4d:90:f2:62:df:dc:26:23:59:d7:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=8ac4220b6843a7654052ba8ed28fce09382af270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:3c:8d:63:50:1d:77:cc:a9:2c:fd:78:71:
24:80:70:8b:43:f6:dd:ad:91:f1:87:d2:9a:2e:95:
17:f1:cc:3d:17:e8:39:a0:64:a9:f5:68:11:57:54:
57:00:5b:90:79:5f:80:0e:9f:23:fe:e3:d4:2a:53:
66:2f:02:54:5a:3d:fd:81:59:d6:8b:70:30:29:04:
fb:59:19:38:21:44:c8:16:70:6b:46:78:49:f4:6e:
75:2f:1a:50:90:27:ab:e6:69:e9:61:32:61:e3:f4:
8c:e8:32:65:dd:65:b6:4e:cc:55:69:bb:ce:20:35:
2f:bf:69:9e:b3:5e:77:89:d0:7d:8a:b0:7f:ca:85:
ab:aa:51:e8:70:58:5b:26:bc:1a:87:d0:31:d7:8e:
94:5b:ce:90:43:bf:9e:88:c2:7b:78:f1:45:f0:a1:
32:0a:44:ac:3a:e5:f0:c8:70:bb:e3:36:c6:18:48:
d1:de:80:b7:5a:7a:1d:6c:da:1d:0c:37:31:fa:f6:
5b:e5:f6:97:81:7c:95:21:a9:a2:80:84:be:0f:13:
46:d4:c7:f4:82:48:10:f3:9d:63:c2:3f:08:fa:63:
40:77:b7:b6:a7:a4:95:01:8f:ec:d7:45:64:53:33:
bb:f3:85:0a:1b:90:b5:f9:a2:60:21:db:97:23:c6:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:22:0B:68:43:A7:65:40:52:BA:8E:D2:8F:CE:09:38:2A:F2:70
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:c2:0b:51:14:5d:e9:83:e4:9f:8a:14:83:9c:aa:b5:b4:
24:69:f8:d7:ab:17:db:cf:c0:d1:9d:4e:2a:48:6d:18:fd:7b:
51:ba:1b:ca:22:cd:69:77:f3:21:97:c9:28:0b:07:5d:19:92:
79:ae:02:47:10:cb:fc:00:0e:ad:2b:68:d3:33:22:1a:05:25:
21:e0:d3:7f:30:b7:b9:6f:0e:54:d0:61:97:89:b0:1b:34:37:
44:83:a9:22:c1:23:9a:40:50:3b:64:10:1d:6a:0f:99:09:0f:
6c:48:ed:f2:4a:05:53:24:8e:fb:16:68:21:02:7a:3d:5d:6e:
c3:1e:0f:f1:29:83:cd:1f:c9:93:70:08:d4:23:0e:d0:81:68:
76:42:41:db:e6:db:8e:3b:71:75:54:ca:8d:f1:fe:ba:d1:13:
6c:50:07:26:be:32:90:5d:f3:50:ed:29:bd:d7:90:45:4e:4b:
be:37:c2:b1:91:e0:2d:17:00:d6:4a:5f:3a:54:62:ed:75:ef:
16:44:d4:49:75:2a:ed:4a:65:ad:57:6c:11:09:22:12:3c:0b:
75:f1:a7:cf:0a:44:5e:bd:cf:22:c9:3a:06:65:a8:dd:53:df:
3b:59:36:80:c2:0e:4b:5b:46:0d:0a:f1:17:b7:d2:26:41:7c:
e5:a1:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:59 2025 by rpki-client