Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: ofWjs9/WDPQMFQv6fyLLulaEQ2Fo5GrwfbHA9s1fXXU=
Subject key identifier: 9C:0B:77:09:3A:93:4C:85:B2:11:02:F5:69:E5:F0:A6:C0:DD:8A:96
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0199FB0F1DD9C85069F530B4DA6386EC593B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: qslbjjAAtGWsRXSKHfTA+YLafCeuJ7vDI7eane2PG+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1d:d9:c8:50:69:f5:30:b4:da:63:86:ec:59:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=9c0b77093a934c85b21102f569e5f0a6c0dd8a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:aa:62:f5:23:06:bd:7a:84:04:7d:0f:30:
94:f6:87:dc:d3:44:df:fb:57:d2:83:56:22:a9:83:
a3:b0:78:1a:d2:73:7a:de:bb:d5:ad:2e:8d:d2:62:
1a:51:6c:05:d4:16:69:ec:85:bf:f6:c8:7b:e5:2d:
37:e0:0d:ab:a1:43:57:09:09:c7:eb:cc:27:29:c3:
e9:5f:c4:d4:a0:59:93:e6:8e:f6:01:2a:71:af:3e:
ad:5f:af:2a:09:72:5e:89:ff:ff:b9:b8:f3:93:1e:
b1:cf:67:52:dd:46:70:b0:48:e7:cc:16:49:e1:1a:
82:c5:ea:bf:ac:ce:2e:f5:89:d3:db:43:8d:2c:09:
16:ee:d1:08:09:0b:7a:25:cf:19:4f:31:c6:eb:75:
e9:a4:93:5c:a0:a0:24:2d:7e:51:6b:e7:66:98:5f:
18:04:9f:ae:71:e4:b5:ed:9c:ca:a4:ab:76:43:d8:
3a:e7:a0:b3:ff:25:06:b4:ba:30:7a:fc:38:2e:ce:
06:f3:01:c6:0c:fc:61:39:26:e4:b5:d1:29:0c:68:
eb:7b:c4:24:24:94:e0:38:01:2d:7a:c9:55:72:7e:
2f:fd:ad:63:02:b1:6e:1c:d4:ab:f9:b3:1c:72:6e:
53:21:8f:67:43:21:05:3c:ed:60:3a:0d:5f:90:85:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:77:09:3A:93:4C:85:B2:11:02:F5:69:E5:F0:A6:C0:DD:8A:96
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:ea:ef:75:cf:2c:32:c3:b8:3d:f8:f1:10:7b:13:ae:c4:
6e:68:3f:a8:6a:4c:7d:30:c5:6e:5d:59:87:ec:82:ec:17:ed:
93:49:36:6b:32:4e:5a:08:18:df:d6:cd:7c:d2:ad:56:3a:6b:
c2:54:2f:5a:0d:68:a4:87:d1:b8:92:0d:ab:b6:dd:c9:4d:4c:
ae:0d:82:1c:13:f5:9c:84:49:34:cb:4a:42:6c:da:88:f0:b5:
9b:6b:b8:fb:63:15:1f:d7:40:99:76:61:c9:e1:f7:ac:b9:53:
2c:81:d3:17:80:cf:68:68:49:0c:e7:96:85:f4:69:0e:71:c2:
6c:8f:12:26:0e:bd:d7:a1:26:41:32:ea:4f:43:7a:a2:ed:94:
ff:27:93:3a:05:ad:11:11:96:f6:12:40:66:aa:2a:79:24:f4:
58:16:46:11:f2:26:25:d1:87:78:e2:c2:ae:fa:db:c5:97:f4:
6a:2e:25:6a:b3:ad:58:ba:d8:19:25:8c:f3:17:a0:03:9a:37:
93:42:16:98:2d:ff:c3:2a:c4:f6:f2:c5:6f:cb:3e:58:e3:97:
24:d9:f0:14:88:72:0c:ed:0e:7d:3f:d6:d5:79:41:45:f0:af:
81:89:68:5a:f7:9e:1c:92:6a:c9:81:4e:98:ef:41:02:55:ef:
d4:15:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client