Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: kL4xgmIzyl3BxxoFnghqsws6X1wIdpyOg43FusNBXmE=
Subject key identifier: 22:AB:3C:4E:8D:29:92:03:15:91:02:FA:6C:48:9C:EC:70:42:0B:91
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0199FD347705CCDFFB2F3E64AAE0309D727A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: AYiQNN3buFNjFiTS/NLp7PLywds8d0E6L2/bLkLqoyA=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:77:05:cc:df:fb:2f:3e:64:aa:e0:30:9d:72:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=22ab3c4e8d299203159102fa6c489cec70420b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:19:a5:65:dc:77:da:c1:a3:3a:17:36:b4:
ce:29:be:fd:33:60:46:ae:02:f9:65:f4:35:9e:6e:
cb:f1:64:3a:16:c8:3a:f7:dc:d3:bd:eb:c3:32:47:
f4:d8:01:8c:f1:6d:9d:47:41:39:a3:15:da:34:98:
ba:74:0f:21:75:6e:50:8b:04:ed:16:fd:50:8f:35:
bd:a6:2e:1a:25:6c:05:f6:26:90:0e:cf:e4:d2:c0:
d3:2e:46:18:b2:fd:6e:ba:4d:9a:ba:b8:ac:a2:c9:
82:36:a7:3d:e7:d2:f4:60:f9:5e:b0:82:21:f4:16:
8c:5b:67:71:e9:15:2b:33:52:57:b7:d4:2a:db:18:
1f:b9:9a:a9:fb:2f:a1:e0:74:8b:0b:53:80:5e:75:
2e:9e:30:1c:19:6f:5d:0f:7b:a5:1f:9c:50:69:e5:
37:38:d9:ca:a7:8c:c7:30:ee:52:18:80:1e:6d:d7:
64:85:75:56:8e:69:2e:81:f4:a3:71:64:50:79:ac:
f0:99:7f:6c:5c:c5:1d:6b:5d:80:9e:cb:ea:c0:e5:
91:d4:ad:de:38:cf:d1:1f:43:b2:a9:3d:f6:05:cb:
cd:55:10:63:bb:1f:f2:87:ad:39:aa:0f:e6:fe:b2:
2b:d7:b2:4d:a7:6a:99:30:1e:a4:b9:5e:d8:0d:35:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:3C:4E:8D:29:92:03:15:91:02:FA:6C:48:9C:EC:70:42:0B:91
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:51:a3:76:0a:3c:62:a2:7e:41:98:7c:27:e4:49:75:5a:
1b:0d:3d:d3:39:28:fe:79:e9:68:00:15:75:e5:77:96:a7:9c:
9e:2a:e7:a8:ac:88:0d:d7:65:cb:bb:a8:e3:24:aa:0e:5e:28:
81:33:ec:a0:5f:81:c4:8a:86:36:80:d3:48:4a:81:5f:c3:9a:
d9:e4:d4:b0:20:04:f4:bc:6a:15:63:1a:40:c3:09:fc:6a:eb:
2d:89:4c:e5:78:c5:fa:63:65:75:f1:cd:14:1f:d6:12:f4:9b:
04:f2:9f:83:e9:6f:1b:e4:c1:36:b6:cd:49:fd:d4:76:7f:5e:
7f:e8:b4:20:3d:e2:59:86:78:5e:04:70:d0:a0:1b:cc:a1:ea:
c2:e0:ab:54:c3:ae:59:c8:95:b6:8a:60:d2:0e:7d:b5:9c:b1:
71:ec:9d:ac:5c:86:51:e3:76:fb:30:3c:0b:bf:6d:96:24:59:
50:5a:5d:7b:9d:2e:56:60:09:d7:d3:f0:06:2b:d1:49:94:e8:
3e:db:90:85:2d:9f:fc:13:70:5b:4c:19:d7:3b:a9:e9:3c:88:
fe:46:39:21:bb:fc:79:c0:c6:22:2c:6e:73:f4:fa:4e:b7:81:
6c:63:f8:8e:06:cc:71:9d:1a:cd:a0:64:9e:d0:01:4f:8c:8a:
ff:30:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:56 2025 by rpki-client