Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: Z0kKZkLGEsIXrCc5HXqOGwzRQlnVQQWaMiYsSYPA0S4=
Subject key identifier: F3:2B:17:60:D7:B7:C5:E3:BF:5F:51:0D:AF:BA:1E:EF:23:35:BD:4F
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0199FEEBD6415CB18CF98B1AB83B220E020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 00:01:32 +0000
Manifest this update: Mon 20 Oct 2025 00:01:32 +0000
Manifest next update: Tue 21 Oct 2025 00:01:32 +0000
Files and hashes: 1: h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa (hash: gMyDoTfbghGyh3Yg7Wcs9Qgp2ODCZ1LcJvPzyuFIMbU=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: XHSDhTDQtlcBnSDdcMC+zayJCpXsXQ8Ophnyz4+njks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d6:41:5c:b1:8c:f9:8b:1a:b8:3b:22:0e:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Oct 20 00:01:32 2025 GMT
Not After : Oct 21 00:01:32 2025 GMT
Subject: CN=f32b1760d7b7c5e3bf5f510dafba1eef2335bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:50:51:14:de:35:7b:9b:bd:6c:44:70:c3:
cd:a2:5b:d4:8d:a9:b7:df:fb:b9:6f:eb:d0:45:c3:
58:5e:b4:de:6e:77:96:b8:14:46:dd:59:3c:1d:2c:
48:b3:71:67:4d:91:b8:fc:18:f5:d5:de:e7:bc:52:
94:69:cc:97:ee:2e:52:3e:37:7b:fd:8a:1c:fe:8b:
c6:a9:ba:d8:c0:fe:69:d2:a6:1e:4e:5c:a3:6e:af:
80:64:7e:89:b3:71:b5:3f:2a:cd:e9:1e:4a:f4:6f:
02:45:dd:cf:60:c9:f1:2f:13:52:5d:ac:54:74:42:
ed:5d:f6:42:e4:c0:f8:96:5b:a0:3c:60:b3:09:1b:
0a:aa:68:ae:f5:fa:9d:31:51:a1:3d:f0:ff:7e:d2:
4e:a5:20:ee:08:f8:96:ba:00:d5:f6:61:c8:ac:a2:
ec:3d:ac:18:0f:82:f8:2a:f8:30:d0:a6:49:c4:1c:
5b:2f:c5:2e:36:2e:e4:36:0a:64:c5:27:44:9c:42:
7c:bf:21:4d:ee:10:9c:bd:27:2e:47:d1:69:b2:ed:
40:18:72:26:5b:ad:87:2d:01:b5:b3:ff:29:b6:bc:
05:90:1c:a6:cd:ae:02:99:d1:20:36:01:a1:e9:0f:
b1:aa:80:38:ce:63:82:7c:e3:f4:de:82:15:1e:64:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:17:60:D7:B7:C5:E3:BF:5F:51:0D:AF:BA:1E:EF:23:35:BD:4F
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:1d:f7:0e:5b:7c:ec:55:d0:c8:93:45:3b:7f:66:ea:77:
71:a1:2e:a9:74:40:eb:48:47:20:5a:e9:4f:ca:1f:01:6e:63:
98:ef:4b:4a:ff:10:ec:67:94:f7:c1:4e:40:ac:6f:06:5f:10:
8c:79:6c:06:19:86:6d:07:ff:a9:f5:09:b4:df:c6:0e:62:ea:
7f:05:0f:5f:bf:86:7a:46:eb:be:e8:f4:54:52:c3:0f:66:1d:
ff:f6:77:a2:81:f2:7f:fd:11:f6:00:d8:a0:04:01:c2:d3:fe:
01:88:c0:c1:9c:8e:9c:0d:12:6d:45:4f:09:47:df:94:76:9a:
83:62:75:dc:19:f2:0f:8f:b8:d8:57:5b:30:cc:29:35:b4:16:
3c:e8:aa:10:86:ef:b2:61:78:ce:2f:74:c5:18:47:29:60:45:
ea:50:12:8a:a0:24:2b:f6:aa:83:59:40:80:ca:ce:6d:ed:c3:
19:2d:23:1e:db:0b:00:20:69:75:f1:65:15:e7:fd:71:4c:b3:
23:45:98:8e:15:1b:b8:c7:6b:02:0b:8b:e2:80:59:65:95:3d:
01:2f:66:91:57:2b:f2:a4:90:28:f8:99:bc:47:53:c1:13:ee:
7f:e0:ab:33:be:ce:93:27:9e:f8:0f:2a:6d:4d:a6:42:b9:1b:
0a:85:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:35 2025 by rpki-client