Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: lzGAs0/v9Ip3gUNDpO4MeBM5oWM7DYrqUvWdc8pGZI0=
Subject key identifier: 53:44:54:AE:31:21:C4:31:07:5B:61:19:A6:50:D1:92:B9:47:40:FF
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 0199FC217059B995D468E5CA2CC5991A05B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: tLMBgpUmfmu2/S1rspvTjUGcpxSbyOakRrzNNnb94S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:70:59:b9:95:d4:68:e5:ca:2c:c5:99:1a:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=534454ae3121c431075b6119a650d192b94740ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:26:a2:4b:0b:2e:45:e1:2d:ec:a1:05:26:
70:6f:9c:79:49:c1:b8:72:e2:ea:d0:39:2d:22:21:
3f:85:8c:f3:14:3a:bb:6a:3a:85:d3:0b:60:11:f6:
ee:b0:b1:fe:e2:53:f0:06:90:26:c9:1d:7f:7a:60:
5b:b9:93:77:75:e8:6b:0e:b5:4c:c1:74:94:f6:83:
4b:d8:9b:f5:19:f9:4e:76:68:e5:4e:0c:9f:0b:99:
ef:b7:74:fb:2d:49:4c:89:02:a1:69:d9:e7:41:a7:
21:77:a6:dc:60:6f:d9:26:53:5a:2b:6f:14:bb:95:
41:ef:18:d8:15:d3:94:58:21:d1:3b:cd:4f:1d:0c:
7d:0d:d4:fa:97:e8:f5:44:82:ea:4b:9e:2e:df:af:
be:c9:fa:75:89:ed:96:47:b2:9b:d6:ff:e9:3c:89:
42:94:23:fe:b9:c5:6b:ac:36:43:1a:18:cc:01:c6:
91:41:e6:e4:3c:9f:3f:dc:46:4b:e7:a4:c5:9f:19:
fd:3c:13:e2:f9:61:b2:94:f7:43:5f:4c:ba:04:6a:
99:2a:81:a5:3a:aa:a6:15:e9:5a:d5:08:33:47:ab:
71:f1:0f:ee:86:f0:a5:0a:0d:a3:c0:9a:bd:c4:12:
88:ae:b7:8b:ef:eb:db:a3:25:d0:fb:a5:de:24:74:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:54:AE:31:21:C4:31:07:5B:61:19:A6:50:D1:92:B9:47:40:FF
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:30:a2:b0:57:82:e3:96:ca:e9:06:ef:b4:8e:0f:3a:51:ab:
a5:99:71:84:fe:6b:a0:19:ef:74:98:40:0c:4f:51:44:33:ae:
fe:34:28:ce:6b:6d:d5:7c:ea:93:01:84:db:cf:f0:40:0e:72:
9e:7a:36:44:ee:4d:a4:8a:07:38:f1:66:ec:6c:68:40:e9:06:
cd:98:2b:31:98:aa:4b:08:43:c8:39:c1:0d:37:13:21:72:09:
b7:b3:d9:09:da:36:2b:42:aa:75:4a:7e:64:d4:28:20:a1:65:
ef:8a:cb:69:d7:aa:18:88:81:37:fa:9d:10:81:24:f2:ad:6b:
81:01:70:ca:fc:71:a5:23:60:d3:74:23:ed:c3:51:35:6e:ea:
3f:a9:25:54:f4:f1:f0:b2:a4:d6:c9:40:35:95:ee:4f:1e:8b:
78:ca:2c:62:78:a0:59:2d:a0:19:6f:29:f2:70:7f:f4:9e:60:
e9:79:bc:c1:cd:ec:e7:db:e3:ec:5a:6e:ab:e5:57:8b:82:c0:
29:4a:b2:c5:3b:76:aa:94:6f:16:10:83:eb:c3:2f:54:f1:96:
75:b7:18:00:be:00:b6:1f:7c:d8:92:cb:00:fa:fc:48:16:c2:
ae:f4:6f:72:99:68:e5:b6:a9:4f:22:ee:f0:39:5d:72:28:64:
ce:51:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:27 2025 by rpki-client