Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: 4Oe1urU7/I/I3Nf7qXYpLjfoJ4gI+s+BtW2ME6FhSkU=
Subject key identifier: FF:FC:5B:74:AB:88:BD:7D:51:D5:DB:DB:2D:AC:BF:51:D1:2E:AB:AB
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 0199FD3428510DAD49F4959FB9108CE262F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: TC195ovaQXF+T9umWHeQKhzXEvue0HroqDDjkrJuz+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:28:51:0d:ad:49:f4:95:9f:b9:10:8c:e2:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=fffc5b74ab88bd7d51d5dbdb2dacbf51d12eabab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:f5:e2:8c:c8:df:f3:9c:f8:80:eb:c0:4a:
79:fb:b3:3d:35:73:8f:cb:c0:6d:49:48:f3:d8:a8:
89:a8:1f:07:58:a7:17:1c:a7:27:b0:83:18:19:b7:
40:b2:4e:87:a7:48:c4:d3:58:b5:9f:98:d7:25:ef:
79:d5:3b:86:6c:6b:8e:24:23:c3:89:19:6a:e1:74:
02:7a:c9:9c:cd:e8:6c:8b:ae:c8:fa:19:50:72:d6:
b2:41:64:75:a9:e3:19:fe:25:11:13:bf:bf:88:77:
b2:02:4e:54:91:67:76:93:f9:1a:48:ab:95:d4:03:
45:ac:dd:6c:08:4c:0e:59:7a:74:04:22:f2:b4:b3:
d6:c3:dd:30:ce:f7:96:aa:5a:c1:46:68:cd:d7:18:
73:f3:ec:e0:cc:23:a1:94:37:50:60:bd:00:29:44:
b4:77:91:1f:29:b8:cd:6b:02:e6:b6:df:fb:c1:40:
e4:e9:6d:5c:f8:49:e4:6f:af:04:b7:78:80:31:b5:
9d:c0:1c:c3:a8:72:c9:77:74:d4:1b:a2:35:84:53:
e5:20:a8:64:7a:f3:23:a2:42:0c:66:42:a9:d4:23:
f9:28:dd:e7:a6:8f:8e:93:40:58:65:bb:24:d4:98:
c0:89:18:e1:ee:5b:73:da:27:4b:c7:25:c6:3b:bf:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:5B:74:AB:88:BD:7D:51:D5:DB:DB:2D:AC:BF:51:D1:2E:AB:AB
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:92:ba:d0:b9:c1:de:4b:c1:4a:03:64:38:67:1d:16:ca:
74:49:25:48:c6:c0:75:b2:41:e9:7f:41:7f:f5:1a:b8:e2:c4:
2c:90:47:17:7a:d8:a1:7e:78:c2:e2:6a:09:97:31:b7:92:4d:
6f:b8:90:4e:a4:36:cc:1e:43:4a:39:e0:b0:8d:66:bd:5a:cb:
84:fe:e7:a0:7c:8b:f6:51:b2:4b:5e:78:84:01:4d:bd:af:30:
88:7f:7d:0f:3c:13:7e:52:76:27:2c:6c:56:f4:b0:93:9a:3b:
9c:4a:50:a4:6c:68:fd:10:33:c4:fa:a3:ea:32:d7:ac:05:dd:
de:12:4d:d8:62:4e:a7:fe:dd:e2:4a:e3:40:f3:12:d8:f8:cf:
68:65:2d:e2:4e:2c:fa:21:f4:84:73:1c:ed:50:88:6d:07:fc:
b2:47:b0:b3:79:86:79:43:1d:fa:93:ce:de:87:fc:ef:6c:38:
b8:2e:57:ac:ca:fb:56:b1:bb:2a:50:93:24:9e:02:42:f7:3c:
05:4d:ff:70:65:a9:c7:a1:6c:58:79:56:d3:7e:08:09:85:80:
8c:57:27:91:96:cd:b1:bf:ad:0d:b5:2e:be:9e:4d:25:73:f7:
2e:4e:88:ea:2e:09:05:f6:ed:48:94:bf:fe:fe:88:13:5f:29:
87:12:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:31 2025 by rpki-client