Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: s4Uhwx++oCCWZqgmRHkBw4mAeI8U6jonq0ggwDKGy6c=
Subject key identifier: 2C:8B:58:A4:D7:BD:B1:84:92:DE:4E:04:83:67:78:34:99:E8:6C:BE
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 0199FBEB2A290153F834660794E27C22DF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=)
2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: uVbFz0jcCOEw0VXmtCZzGXo36TfX4FfbNcqbFWENB+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2a:29:01:53:f8:34:66:07:94:e2:7c:22:df:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=2c8b58a4d7bdb18492de4e048367783499e86cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:53:5b:b1:0a:66:47:bd:77:49:b9:f4:9f:
1d:b5:70:0c:3b:47:c6:42:f4:60:17:af:9a:25:91:
f6:e9:f5:8f:5e:85:eb:59:42:57:c1:d0:a5:19:e1:
3d:b1:e9:10:2f:76:e9:f0:ec:b4:50:0e:c2:57:8a:
1d:0b:fd:6b:ea:7f:43:fe:7e:6f:84:b6:1d:31:79:
d3:62:4d:e6:7e:ae:86:88:28:f0:5e:f5:60:30:28:
4a:29:c1:1f:70:6a:71:4e:6c:bb:99:af:17:7f:45:
ed:1c:ba:40:fb:c7:99:bc:5e:bd:05:85:e1:54:a2:
9c:b2:22:14:cb:90:f6:bf:cc:bb:ab:ba:52:e7:ef:
2f:e4:18:48:f0:da:e9:b6:92:e9:90:b1:c4:d8:e6:
b0:21:46:31:f6:5d:49:3c:b5:0d:40:13:85:c5:73:
31:e3:5d:f0:73:f9:d6:c3:e1:24:ae:f5:4f:ac:29:
40:2e:ef:4a:e1:fb:d1:0d:31:3f:81:a4:dc:c2:cb:
92:9c:1f:f3:96:80:32:56:51:43:42:cf:f3:df:b0:
18:aa:ee:d1:75:d1:90:06:6e:7d:79:71:e8:3f:ee:
79:bc:db:6c:6a:40:f7:ea:26:61:d9:a9:ef:d7:77:
e5:fe:17:79:60:97:7e:f7:a6:83:24:a6:50:52:e5:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:58:A4:D7:BD:B1:84:92:DE:4E:04:83:67:78:34:99:E8:6C:BE
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:63:a9:76:a7:80:21:02:00:81:80:6a:e2:de:a9:cc:87:b8:
64:f8:2a:ac:1a:2f:d6:bc:6f:b0:78:22:dd:f7:5d:dc:9e:82:
0d:82:23:91:d5:54:b3:c2:3e:d3:af:96:06:1b:ad:d4:7c:98:
b5:e5:5f:fb:06:d3:31:11:e7:8b:94:1d:b9:07:30:a6:2f:3c:
eb:e1:37:66:49:d4:8c:82:df:cc:57:f6:70:ed:99:22:51:93:
09:b2:f1:ad:2d:f2:ac:7a:c6:a0:8d:dc:9d:ae:d7:d0:9c:3d:
44:cc:87:57:02:32:65:59:46:5f:da:76:29:65:3c:0f:b4:e8:
c4:12:21:b1:9a:7d:87:b8:76:3f:c6:75:2a:9c:56:27:27:8e:
fd:fc:94:7a:3d:b5:65:36:c0:6e:f3:10:76:89:6c:83:cb:bb:
1c:62:42:32:1b:03:d4:d5:98:e0:bf:ac:76:82:c0:24:43:34:
56:30:fb:f2:2c:d7:59:14:27:6a:41:91:1f:d7:f2:41:f7:d9:
20:47:3f:cb:99:e4:cf:c7:16:32:bd:85:a2:47:3a:f1:da:68:
25:44:e7:73:15:de:ee:12:42:7f:a2:ca:74:f9:b9:f9:f3:24:
98:bb:f9:32:00:54:b1:7e:1a:5d:83:4b:37:c5:35:d9:a0:72:
bf:5a:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:51 2025 by rpki-client