Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: ph+6+pkolAuvQidAzHorV8S6VolNfsNq7cTLDRydG9Y=
Subject key identifier: 36:C3:1C:A6:27:84:7E:3D:CB:C2:85:A3:E4:5B:D0:49:FD:32:E3:41
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0199FCC641899E90E1C4D77515997930F4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:15 +0000
Manifest this update: Sun 19 Oct 2025 14:01:15 +0000
Manifest next update: Mon 20 Oct 2025 14:01:15 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: p8F48YlyKTz70LI+w2iA4oPfgKcrRJIjLVs0ii9/BH4=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:41:89:9e:90:e1:c4:d7:75:15:99:79:30:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Oct 19 14:01:15 2025 GMT
Not After : Oct 20 14:01:15 2025 GMT
Subject: CN=36c31ca627847e3dcbc285a3e45bd049fd32e341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:7e:d5:21:ce:e2:f9:26:af:a1:e4:46:de:
6e:60:74:71:a1:f6:93:c5:39:59:f0:51:1f:36:01:
fb:50:ab:03:78:c3:74:dd:bf:d5:37:9a:aa:c3:60:
40:f6:18:8b:09:2d:15:1d:b7:36:ce:af:1f:4c:54:
35:28:37:f4:bd:79:29:71:ac:f2:53:ee:90:52:e4:
20:f3:8f:36:ec:9b:4d:45:0b:78:0d:55:4c:68:6b:
3a:e7:11:0c:5c:4c:b2:7e:2f:45:15:32:62:2a:71:
01:80:a4:c3:fb:a2:7d:73:87:70:86:b1:e3:26:15:
91:0a:a7:27:d8:b5:4d:f6:37:2b:ee:89:3d:72:2a:
e4:5d:b9:f4:0a:b4:1f:71:74:d5:41:8f:97:0d:17:
cd:4f:8c:13:79:c0:63:3b:80:b7:b4:33:db:a3:2c:
49:53:c7:94:2d:05:c9:55:da:7f:97:df:da:b5:45:
4c:fc:c4:7d:3d:15:d8:f6:93:05:ac:00:05:c7:77:
86:12:36:3a:5a:4a:66:1a:e2:e8:48:d7:9c:79:75:
6f:3d:19:9f:25:d1:00:31:53:12:d1:83:23:25:7f:
66:55:44:9f:6a:a6:53:fc:17:f9:fb:cb:51:28:c2:
00:ba:45:87:3c:39:de:7c:0f:a9:d9:83:3c:a5:70:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:1C:A6:27:84:7E:3D:CB:C2:85:A3:E4:5B:D0:49:FD:32:E3:41
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5d:9a:c0:23:72:ca:8a:86:4e:bb:d7:8e:15:14:85:dd:dd:
e7:aa:3c:c2:a5:33:86:b7:1e:d6:b7:0a:d6:78:5f:f5:60:98:
38:3c:ab:f8:a5:b6:ad:70:28:5c:9f:7b:79:54:d3:38:e4:5f:
23:8d:a6:5f:17:6d:81:e6:cd:b4:73:73:6d:f7:0f:26:b3:47:
8c:e0:2f:17:a1:0b:dd:59:38:ed:90:35:12:83:11:b1:54:a5:
87:75:0e:7f:2f:f6:83:6d:ff:f8:2d:0e:0d:af:db:14:3f:2e:
45:0f:9b:f3:16:db:a3:91:c3:54:72:5b:fa:3e:de:20:1a:2d:
c2:68:8e:21:52:57:3b:d2:c8:08:38:25:24:e2:fc:e6:ed:be:
69:72:84:6d:33:47:0e:d0:9d:d1:80:59:99:73:78:05:5c:9e:
9e:06:ff:0b:21:b5:f0:1c:93:56:3c:21:18:7e:22:36:bd:06:
21:18:8b:8f:78:91:51:fa:75:82:5c:47:cf:2d:c5:c7:70:e1:
dc:91:a1:8a:e1:4b:19:0b:b4:72:a5:e1:d3:27:2c:6c:f8:c9:
a4:d8:58:9c:dc:72:07:af:31:ff:2b:ca:8b:c7:b5:34:38:52:
83:b9:f7:c2:e2:69:bc:3b:34:bb:7f:55:43:39:62:3b:d4:6e:
c0:8c:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:24 2025 by rpki-client