
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: P8qlv+N029U/Gat6xj54It9cU7tD1VikxlJhdZ/mTbs=
Subject key identifier: FB:D2:3C:44:3B:C3:B4:C3:9D:32:3F:29:1E:F1:C5:7E:53:5C:71:AC
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0199FAD7A4AB3F25A076E2E07EAD71656F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: JWuehNjfunoSWk87AxgTbxwMojeIdb162KAAjTKdZR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a4:ab:3f:25:a0:76:e2:e0:7e:ad:71:65:6f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=fbd23c443bc3b4c39d323f291ef1c57e535c71ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:c4:ad:07:c8:08:41:93:b5:b4:43:a1:2f:
3a:94:23:9c:f9:82:da:b2:ac:67:85:e6:8a:44:af:
54:65:92:39:a4:51:ea:7f:1b:66:71:73:b7:7e:62:
a4:9b:58:df:cc:82:3c:55:fe:da:0f:d4:0f:22:02:
36:d0:10:bd:ff:44:3b:d1:f9:93:6a:c3:bf:f4:04:
1f:9f:d4:c5:15:b6:7a:41:16:97:96:30:b5:7d:5c:
5f:49:3e:44:f8:91:65:1f:e3:97:40:3a:a5:a4:bf:
06:e0:89:0f:5b:d8:62:71:ea:a9:a4:db:ca:9f:09:
83:17:a3:3b:b0:ef:4d:e2:6e:a9:c4:e7:af:4f:08:
1e:3c:21:15:04:a0:e0:c5:99:0b:0f:58:08:ac:00:
bc:a3:74:69:0e:ff:e1:75:ef:a3:26:97:f0:2a:ac:
fd:19:5e:07:16:c1:12:75:c1:37:32:3b:74:4d:a8:
b2:81:02:a8:2a:02:92:ac:16:d0:04:7f:33:43:d6:
c5:b0:13:03:fb:ca:20:ae:ef:c6:55:cc:19:88:6b:
13:27:69:0f:8a:4c:da:32:86:d7:64:7e:68:6c:69:
72:39:ac:ab:dc:da:1f:c9:0e:40:dd:61:7f:7b:88:
3e:50:30:7d:4a:e4:b7:cb:a4:0f:0f:34:2f:89:cb:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:3C:44:3B:C3:B4:C3:9D:32:3F:29:1E:F1:C5:7E:53:5C:71:AC
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:81:b9:d4:de:97:66:72:89:6c:6d:76:42:ed:58:36:50:
44:ae:52:4a:16:e0:e8:9e:ce:8b:8a:a9:ab:a6:a9:d6:32:fa:
b8:58:01:00:8c:d9:02:62:62:7f:11:94:27:93:b0:94:dd:a7:
e1:57:93:e5:82:c1:d4:11:21:15:7b:78:1f:ad:af:eb:75:a3:
2a:55:e5:ef:8d:d6:2d:c8:6d:6f:22:19:41:28:fd:02:2f:de:
a5:d1:17:4f:f2:a0:71:9c:f7:d4:65:36:82:7f:0e:e3:c6:80:
c1:4a:2e:ca:9a:3c:67:b0:c8:b3:c2:e6:98:44:f4:f9:00:ac:
36:58:aa:04:1a:70:0e:7e:c2:10:7f:99:4b:d1:4d:b3:bf:b2:
fc:4e:d7:2a:df:c5:1b:c0:de:d1:e0:1a:06:5d:83:bc:39:1a:
8e:08:46:b2:3d:bf:cc:63:6f:70:bc:f5:1e:93:87:fe:1c:b3:
21:34:7e:f7:bc:db:c9:60:7d:95:e3:96:f4:19:2a:d8:9d:28:
cc:1a:37:86:d1:e8:2a:c9:ae:30:eb:dc:e0:74:e6:80:93:24:
92:4c:59:75:cc:81:b2:e6:11:fe:5b:ba:a1:06:0c:ab:92:37:
fb:f4:cc:38:f3:32:8b:0a:9f:6c:35:da:16:59:ba:ce:dd:5c:
4c:19:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:39 2025 by rpki-client