Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: QQ+9l9Ft04RCVuTRXvyRhHG7ayi/mfkxz2cgDLrNNBc=
Subject key identifier: 4E:32:92:E9:E1:43:F5:20:84:69:AF:1A:F3:52:B7:B0:86:ED:22:1F
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 0199FD349CAEA1F94DDE3E01200F47677BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: 8uSzcwKk5zbBwdNcLtgQEdX+RYFoviMc9gGFjhkxb+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9c:ae:a1:f9:4d:de:3e:01:20:0f:47:67:7b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=4e3292e9e143f5208469af1af352b7b086ed221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:a3:05:da:ca:60:59:ae:02:4d:48:b7:32:
04:28:c7:96:3f:09:5c:0e:e1:ae:08:d4:a6:8b:13:
44:8a:38:86:d3:dd:44:6b:12:1b:1c:33:5a:26:07:
39:da:c4:27:29:0c:d5:9c:cd:bc:5f:de:89:75:ce:
5c:f1:e0:fe:aa:4d:95:8f:6e:5c:11:31:bb:3c:0d:
c6:37:53:7f:25:7a:2a:83:3c:2b:4e:d6:4e:5f:2a:
c8:8d:4e:a4:00:22:84:11:ea:92:61:d1:e3:4d:a7:
2f:5d:57:fb:88:f9:e2:02:09:37:ce:fc:2f:fc:de:
cb:14:8b:42:b5:26:b6:d6:4b:ee:af:56:cc:80:3d:
24:e0:71:d2:5d:0e:3c:9c:ab:ed:83:5d:b4:b4:0c:
76:5e:a2:d0:2d:a9:ed:be:f8:ff:69:db:f8:ac:cd:
23:54:47:45:1a:ac:18:18:af:9e:b0:78:fb:a3:6c:
2f:f6:18:51:d1:3a:1f:2d:e3:26:87:bc:72:3b:b9:
c9:f4:41:70:a5:16:be:47:8a:59:45:91:6d:0c:1d:
c9:a3:55:e6:4e:58:56:ae:20:15:a5:84:b6:c3:73:
d3:40:53:27:f8:f2:d9:ff:96:76:ac:a1:08:1f:ed:
e8:39:0d:ea:98:05:51:aa:9b:05:fe:3e:a0:be:30:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:92:E9:E1:43:F5:20:84:69:AF:1A:F3:52:B7:B0:86:ED:22:1F
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:9b:20:9f:d2:83:81:ec:b0:27:fd:2d:f2:8d:1d:6b:46:
cd:88:54:57:cf:5c:3d:e9:37:53:ff:42:69:b6:58:d1:b8:03:
51:53:65:19:7a:35:63:b9:7e:41:9a:ac:e3:c5:ce:ad:e9:08:
80:4b:d1:38:bd:f7:c4:2c:4e:d9:af:c0:ef:10:84:f2:58:a2:
1c:d0:8f:c0:ca:70:5e:ab:89:c8:d5:bb:e9:ea:84:c6:7c:af:
14:ce:03:c1:1e:42:21:76:40:b8:0c:ba:2d:ae:6a:0f:9a:ee:
6b:3c:e7:e3:71:cb:2e:1c:a4:02:22:ca:16:06:8b:4e:09:1c:
d8:96:a4:5d:7e:6d:24:01:21:c9:b4:bb:6d:1f:94:88:f2:c3:
d7:26:8e:48:ef:b7:64:66:f2:9e:f7:f0:af:df:58:73:5a:1e:
3a:8c:c5:07:b4:2e:d6:27:e8:e3:5c:95:60:0f:28:d4:aa:65:
ae:a3:68:34:0f:1c:e1:65:83:64:d8:9c:57:42:cb:f0:17:79:
cd:6f:d9:e4:78:0c:c3:88:5e:cf:b3:b4:a8:63:db:58:e4:da:
88:57:f0:76:5f:d7:ae:46:b1:ca:49:5d:6d:4d:ce:e6:89:a2:
d5:d6:60:f5:b5:08:ab:c0:79:08:68:ab:a0:c9:66:dc:b5:64:
70:b9:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:04 2025 by rpki-client