Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: 1a96zt0e7jDRi+q0EyojCVC+Vp8T/c/gkFkfCoqUuxc=
Subject key identifier: 3C:FB:B2:29:DB:19:0F:EC:61:D1:14:E4:AE:29:43:BA:5F:37:0D:3D
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0199FC8F6E75DA8746F0C365856A446FC777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: ApkYMDIoOODNzowGsIhkhQh3OprhcmIcqLFvssec2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6e:75:da:87:46:f0:c3:65:85:6a:44:6f:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=3cfbb229db190fec61d114e4ae2943ba5f370d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:d3:b3:64:3c:56:69:b4:50:c2:d8:bf:88:
cf:9c:cd:91:1c:e3:ba:37:2e:6c:62:81:bf:81:b5:
94:f7:c5:56:f5:20:6c:9a:6b:12:5a:c4:97:1f:4a:
42:23:5e:1e:f8:a3:77:a7:6b:73:b3:b4:6b:b3:6c:
f5:e8:ab:59:7e:6b:ae:fd:07:dd:fe:b1:3e:02:44:
70:9d:61:07:48:a4:09:93:fe:9c:54:50:0c:e8:8f:
4d:5c:b0:20:32:dc:d6:e2:51:2f:35:1a:22:96:1b:
a5:81:bc:a9:0f:22:53:11:ce:56:f1:b2:63:df:b6:
37:70:fc:90:5f:e3:fd:db:a2:4b:02:1a:26:95:25:
cb:14:6b:37:b3:0b:61:cb:80:1a:14:42:04:4a:80:
c0:06:65:a9:5a:4a:db:53:2a:c2:e5:bc:9a:76:2d:
93:a0:d9:47:bf:11:8c:69:9e:be:2f:51:4e:97:74:
5d:81:29:08:6b:7b:e2:63:37:eb:17:fc:bb:24:f8:
b3:d8:a5:d4:74:35:dd:70:df:aa:fa:44:7e:b7:cd:
0d:2d:5a:4e:e7:17:a9:df:8a:db:59:62:d5:47:29:
71:ac:de:6a:1c:12:e4:07:a7:5e:d5:09:e7:ea:a3:
70:53:56:06:80:58:26:ac:b8:21:97:5f:fa:22:51:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:B2:29:DB:19:0F:EC:61:D1:14:E4:AE:29:43:BA:5F:37:0D:3D
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:25:c3:d7:01:cd:b9:d5:63:d2:81:b5:c5:5a:77:b6:1f:
a1:f3:f6:0f:0c:f1:d9:82:0b:d0:34:2e:91:d5:a2:a4:9e:ea:
a8:e6:d5:c0:e2:fc:12:1e:98:5a:48:71:b4:26:c9:2c:5d:19:
3f:73:c4:43:23:36:5d:11:66:f3:00:7b:e1:e1:c8:b9:f3:d3:
73:ef:99:2b:15:01:e9:49:48:e3:7f:95:93:13:e0:9c:db:4d:
20:ab:fa:6c:de:cd:af:ac:c6:80:9c:f9:d8:5b:9a:47:90:83:
7f:52:b9:6d:67:e4:59:c5:03:b5:38:20:ab:2f:fb:a1:5e:09:
ca:32:53:86:11:8f:33:f0:c7:80:04:da:a0:4d:67:a5:ab:5d:
e4:58:8c:b5:db:87:76:9d:43:0e:04:c9:2d:cb:f9:82:62:d2:
89:10:c0:ca:60:d0:58:d0:7e:af:6a:75:bd:18:dc:6c:a2:47:
dd:72:0f:e8:bf:92:c2:2a:67:23:6f:9c:66:45:cb:98:3b:66:
cc:6e:f1:ab:f7:8f:76:ef:d1:5c:9b:a6:1b:c0:3f:e8:ba:e2:
f1:36:ac:76:1b:0d:4f:fd:76:06:98:27:92:14:9d:5a:07:0e:
76:a5:bf:a2:a1:8b:95:67:ee:0e:51:cf:b9:3a:a9:d6:d5:2e:
88:c3:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:15 2025 by rpki-client