Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: kaqbKoDMdhzjc9o+exTNXyYmCJYITpObT0nZeA4Ilxw=
Subject key identifier: 5F:5D:CE:3B:E6:83:DA:24:19:81:14:B2:7E:B1:FB:EF:BC:40:55:4C
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 0199FC219008FAC3F0EBED6B386BC3943CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: oldzq0U1COSS7bmVuedHoNtOauGSdWCM8sNuMQWSfxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:90:08:fa:c3:f0:eb:ed:6b:38:6b:c3:94:3c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=5f5dce3be683da24198114b27eb1fbefbc40554c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:0a:b2:3b:fa:20:76:ca:ca:ed:fe:ed:a9:
50:dc:74:f5:bd:5c:5d:84:c8:2a:22:c5:b4:73:52:
2a:d4:34:d4:f5:ae:eb:bf:d3:fb:8f:81:b1:53:d8:
85:29:c8:1e:74:b9:49:d8:3c:0d:86:0d:28:97:57:
b5:a3:a2:53:3a:54:c9:41:0d:d9:f0:1f:4b:d2:c2:
13:46:d6:1d:52:d2:83:a9:36:91:8b:5d:c3:35:46:
d5:b5:cf:e9:3e:6c:e4:b1:f0:78:a7:ef:84:6d:0d:
df:47:3b:b4:b3:05:b5:62:b2:1a:d0:52:f8:ef:65:
b0:f9:55:ad:51:2d:f4:1e:cd:5b:b7:80:f7:73:ce:
0d:e6:69:42:8a:c0:73:3f:3a:69:b8:00:22:1d:86:
84:2d:50:a0:1f:b4:76:17:a1:2c:c1:e1:a6:31:40:
eb:5d:c5:d3:da:07:36:21:df:32:b2:1f:9d:c9:be:
23:62:23:ec:51:b5:9c:40:91:67:3c:a1:89:5f:83:
2b:9f:93:96:76:71:00:72:6e:18:14:c6:62:44:d0:
9e:d1:d7:64:e8:29:34:5a:79:07:11:b8:db:16:3b:
d6:d2:86:0f:00:59:58:47:30:f4:c2:54:04:fc:21:
19:55:1c:09:5d:ce:1d:77:af:a9:ec:5f:1d:14:f0:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:CE:3B:E6:83:DA:24:19:81:14:B2:7E:B1:FB:EF:BC:40:55:4C
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4b:b8:46:f1:b8:6a:19:76:62:30:2b:e4:10:44:c7:87:6d:
a3:5d:fa:17:b0:0b:38:bc:6b:17:fc:03:1d:7c:4e:1c:59:24:
02:06:cd:1d:ee:6d:13:6b:bb:0a:4e:d9:b1:fb:65:0e:09:b2:
65:a5:ca:38:f0:ae:9f:b1:a9:9c:01:58:d0:2c:41:72:2c:22:
ee:e5:44:3e:9f:a1:90:e2:3d:62:aa:73:07:b7:75:09:e6:46:
93:71:6f:49:22:1b:f9:dd:e4:ca:b6:21:c0:29:4d:5b:6d:7e:
5b:ba:75:7d:5a:83:39:6a:61:6b:51:4c:ed:98:d3:24:e4:0e:
5d:96:86:af:d8:9c:6f:3d:51:50:e8:f4:39:11:f5:33:97:46:
cc:19:ea:af:6a:3d:21:67:54:2c:24:0a:53:7a:21:fe:f1:a1:
6f:27:ce:4b:d1:50:9c:7b:5a:26:ec:28:d8:c6:0b:5b:80:c9:
06:17:b4:06:6a:6d:a0:85:2b:6b:dc:72:4e:f7:26:3c:e7:fb:
f4:ca:fc:c5:03:1a:b2:ee:36:ae:14:7f:7b:77:53:de:98:30:
af:91:42:66:a6:31:58:11:d9:c5:26:88:77:93:27:b0:70:5c:
06:9f:3e:e2:f1:56:b9:7b:d2:2b:64:40:e7:2a:c0:04:2a:f0:
6e:5c:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:54 2025 by rpki-client