Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: SHIRKfbMMk1zACjmRMf9mtSHAriwnQftC1yiqhDHjgo=
Subject key identifier: 2D:D2:DD:E7:ED:14:D9:9B:99:45:4D:6D:3B:CB:60:2E:FE:2C:0E:37
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 0199FFC7BF8F1B931141F7EE72A332441960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 04:01:44 +0000
Manifest this update: Mon 20 Oct 2025 04:01:44 +0000
Manifest next update: Tue 21 Oct 2025 04:01:44 +0000
Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=)
2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=)
3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=)
4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: OzUblnR6qWSig7/y7XimeVurR8Yi/Ud/X2dYTmbKBms=)
5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=)
6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:bf:8f:1b:93:11:41:f7:ee:72:a3:32:44:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Oct 21 04:01:44 2025 GMT
Subject: CN=2dd2dde7ed14d99b99454d6d3bcb602efe2c0e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:c1:89:94:a4:6f:8f:eb:df:e2:f9:a9:65:
ed:97:a7:bd:97:53:9d:60:30:ac:8f:97:5c:f7:d2:
0c:d1:63:78:69:d7:c5:77:13:38:e4:49:f2:e8:5a:
29:5d:03:53:34:69:31:9e:30:0e:f8:18:25:35:0c:
49:e1:5a:a5:fb:6d:b9:89:12:58:db:7a:c3:81:b2:
91:48:91:38:c8:09:41:06:c0:89:c5:f0:33:07:9b:
13:f7:f5:ce:e0:62:99:f5:33:67:4e:86:23:a9:05:
06:4c:2b:07:49:4e:39:5f:30:cb:70:d8:76:e7:60:
75:34:cf:e3:d4:df:5e:57:8d:10:ed:b2:74:93:02:
85:2e:21:21:b6:cf:6b:d1:a1:f7:32:1d:1e:7c:30:
f0:83:23:27:87:4f:46:c1:3a:2d:66:e0:74:6d:3f:
5b:42:44:19:83:ef:8f:91:ed:dd:e5:8c:1c:76:ca:
8f:a9:38:9a:20:33:f1:af:eb:70:eb:81:18:4b:03:
b1:7b:31:a9:35:df:b8:26:21:48:85:d6:ba:83:a7:
e6:27:53:7e:a5:5f:f5:13:5d:55:92:dd:90:e4:27:
0f:35:de:49:91:9b:78:13:a1:f9:ed:2f:3b:a8:6d:
6f:b2:6a:c6:a8:54:0f:74:45:33:76:cd:dd:fb:1c:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:DD:E7:ED:14:D9:9B:99:45:4D:6D:3B:CB:60:2E:FE:2C:0E:37
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b9:20:d2:3b:c7:71:a3:ea:7d:4e:19:e1:07:0e:17:1b:94:
c3:f0:78:aa:a9:15:52:66:08:e8:8a:9f:54:8f:1a:a8:f2:fd:
3f:89:51:7b:c9:6a:de:54:2d:18:5d:89:fa:c7:1a:8a:ff:45:
c7:f8:1e:bb:19:bb:c9:c7:a9:47:94:25:94:54:e5:59:ec:0d:
91:6d:ef:c3:5a:34:47:b5:8b:72:6f:e5:29:fd:20:7f:d7:8f:
44:3b:82:d8:a0:3b:07:a6:d4:a0:2c:81:e4:a0:49:15:39:6a:
3c:c1:47:1c:37:22:f7:72:92:08:50:12:d5:af:c9:97:07:29:
da:c6:fa:cd:9a:14:c3:96:10:bb:59:f2:35:00:1f:72:a3:d6:
b7:b1:c1:4d:bf:0c:c0:bd:90:87:31:f2:6a:9d:fe:4f:8f:08:
9d:07:a2:4c:b3:43:15:54:dd:1b:d7:45:d3:bd:59:ed:57:d6:
d1:ae:44:f0:5b:25:96:e6:e6:c5:9f:32:85:92:13:9a:b1:40:
97:51:92:b4:b2:7b:b2:ac:88:08:6a:f4:31:0c:c2:53:60:71:
28:8d:9c:43:4c:c3:0f:8c:b2:cf:2e:5e:8e:71:a1:c5:e6:d9:
86:ca:a5:19:8d:84:0b:db:bb:46:4c:53:be:5d:fe:fc:97:eb:
48:a3:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:13 2025 by rpki-client