
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: s+8CmhrEPAUBWl1h8XtLJfaS5tsWwE71mhzYnKC5Z5A=
Subject key identifier: 5F:F2:4F:FA:B0:D3:0B:2A:17:57:04:8C:08:7F:CA:4C:F4:B3:72:53
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0199FB7CA68E5E929CF5774666E7F80870F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 15E7
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: hY+A39rWt3xwh9K713pcsv96VAr/yyuV1zNVqyL3jGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a6:8e:5e:92:9c:f5:77:46:66:e7:f8:08:70:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=5ff24ffab0d30b2a1757048c087fca4cf4b37253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:63:ec:17:3b:01:38:ac:5e:54:3b:bd:15:
99:ce:4b:ce:da:93:35:ac:55:2c:7d:69:24:41:ce:
8d:a4:23:02:e9:28:95:ac:e4:12:86:4d:03:11:38:
05:4b:e7:7d:5c:59:e3:9c:94:6d:8c:45:d6:c4:64:
3e:ba:5d:92:9a:2c:36:b5:6d:fc:49:55:d4:8f:33:
05:ae:86:63:c6:a3:27:b5:c6:36:0a:87:71:3b:3e:
07:64:f7:e8:9f:4c:e7:43:29:1c:e7:de:e0:36:0c:
3d:34:68:5c:c0:08:cf:a5:56:ab:84:31:b1:46:a0:
97:a5:87:3b:23:55:36:85:a2:a2:0d:d4:ce:8c:28:
9e:f2:c3:56:ee:1a:ee:44:78:e4:61:ac:fd:3b:d9:
f8:57:e6:33:f4:43:55:36:e7:45:0a:2b:ee:4c:93:
b6:63:11:8f:e0:a8:c9:f0:9d:99:b4:12:29:2a:a9:
ae:ff:1b:72:bb:0d:c2:9c:c7:28:11:50:bb:ce:8b:
f3:fb:ff:f0:66:01:e4:fb:30:ac:cd:a8:3f:5c:42:
f7:01:a2:4b:8e:ca:95:de:06:a3:11:fe:e9:41:6b:
7c:82:a4:21:5a:51:9c:62:4f:49:9a:31:dd:5a:2c:
f1:66:a1:cc:9a:e7:e4:74:c8:8f:04:66:a2:b4:09:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:4F:FA:B0:D3:0B:2A:17:57:04:8C:08:7F:CA:4C:F4:B3:72:53
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5e:bd:a6:38:61:8b:d9:9c:6d:56:18:06:ca:3d:e3:c2:b3:
0e:cf:00:4a:fe:16:a0:40:25:f9:64:b4:6c:19:ca:04:53:e2:
fe:f7:c5:d4:d5:ea:6b:2c:89:c6:32:16:02:2b:30:36:9e:79:
9b:12:bc:2d:87:09:65:e8:50:26:ff:30:03:21:9e:ad:6b:af:
d4:41:75:14:3c:66:28:9d:b0:87:c1:2a:b6:d1:f6:ef:6b:8b:
af:e8:3d:dc:3a:ac:b8:4d:0f:32:29:f4:18:00:de:cc:20:c8:
6b:52:81:2b:fc:69:c9:f8:10:b4:fc:b5:92:27:55:13:0f:e7:
5c:5e:64:88:21:67:9f:47:47:af:0b:ae:9d:1e:de:1c:fa:0e:
72:4c:42:e3:f3:b2:3c:e7:e9:c6:90:56:fe:df:39:2f:23:54:
27:f8:f2:1a:62:58:50:8b:0d:ba:53:c8:ee:a4:53:af:87:c6:
e5:9b:0f:73:d4:ec:7e:c6:84:81:ee:0e:e4:07:9d:ea:7d:db:
cc:4f:6f:c9:1d:0d:42:b3:5c:c2:8a:a5:95:2c:37:4c:b5:8c:
d7:9f:c7:63:65:93:e4:ab:5c:c3:ca:e4:29:e5:f3:3a:52:c9:
dd:7d:71:26:08:50:fb:77:46:14:43:a4:21:58:a0:56:ab:9c:
94:00:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:32 2025 by rpki-client