Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: rt1kcFCa0e0hFVLBkLP3vDB/loI1rzfA0rdCxJOhpDI=
Subject key identifier: 4C:FD:F1:E0:63:AC:15:16:7C:62:2B:70:98:28:C9:35:53:C7:10:F4
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 0199FD6B4D7BA008C2C9623A9884188BB9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: 9msXJXqNfXT+YvbvTx2+AnAaVrfI0VbkEQ5fycBslHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4d:7b:a0:08:c2:c9:62:3a:98:84:18:8b:b9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=4cfdf1e063ac15167c622b709828c93553c710f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:a5:eb:2f:a8:d2:76:04:ff:0d:82:65:42:
61:3f:a1:7f:bd:67:27:24:9b:2a:f3:5f:fc:72:f3:
e8:eb:98:16:33:f0:48:64:6c:29:6e:ae:fd:bd:4d:
54:3f:61:e9:75:ac:ba:6d:e7:89:d0:7a:7a:20:b4:
f0:92:11:67:b4:35:c9:a4:81:85:92:77:ba:8f:a3:
da:c8:9f:ca:b1:76:cc:a0:86:ab:66:e1:35:77:61:
87:13:f9:5d:60:8a:c3:21:5c:34:ac:b3:7d:a1:90:
ae:4a:f6:a6:93:ec:c0:a8:4c:ad:17:7d:8e:44:25:
f4:22:d8:4e:6e:ff:09:ad:d2:96:9a:ad:c8:74:a6:
05:d7:cd:17:c4:ac:19:ab:2b:db:e8:a6:59:fe:85:
08:be:28:3d:85:f6:04:43:ae:aa:77:f9:cb:b5:42:
6b:8f:a4:77:fc:1f:09:fc:10:0a:c5:ae:ae:36:b3:
bb:0d:33:6b:90:10:07:8a:12:c9:33:42:d3:99:8e:
39:08:bc:1f:cb:da:a6:4d:5b:12:f6:c2:34:18:7c:
d5:db:e1:a5:28:41:80:da:71:45:05:87:3b:b5:e6:
d9:7f:30:07:45:bb:b2:dd:e1:7c:29:31:4e:99:33:
65:88:83:bf:ff:6d:03:6b:d8:68:3e:39:9f:04:e7:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:F1:E0:63:AC:15:16:7C:62:2B:70:98:28:C9:35:53:C7:10:F4
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:a5:cb:2f:92:df:ed:de:7e:65:64:6e:fb:64:a8:1f:dd:
76:11:8a:51:bd:7e:39:6d:4e:70:ce:0b:85:29:af:29:81:c0:
a3:ca:58:e6:68:1a:22:bc:fe:c3:50:e7:ac:cf:a2:d7:15:65:
b8:13:f4:4d:14:33:46:67:ec:df:f8:63:10:57:d6:f1:d8:c5:
32:2f:e5:72:19:00:6d:0a:35:58:2a:24:79:e5:f8:85:8d:3c:
a5:c7:dc:b5:f4:fd:2b:dc:ce:77:bd:1c:06:09:fc:8f:9a:ec:
a6:37:75:10:7a:61:c4:df:09:9d:b2:cc:37:5d:83:e9:64:47:
1f:ff:2b:29:5b:ce:e1:f2:58:25:47:18:32:a2:8f:60:7f:75:
77:b2:90:2b:06:29:a3:5c:4e:1f:fb:2e:f9:d5:bf:f7:c6:d4:
22:8a:ad:e1:ed:43:51:a3:cf:e8:a4:bb:99:ef:2d:13:39:93:
db:5b:48:9d:14:f7:42:19:e5:23:37:97:6e:2d:a3:d8:e3:88:
f6:6a:ed:78:e3:c6:03:cc:c9:ce:2c:4d:76:47:0d:43:5b:20:
fd:3e:48:50:cf:f5:1e:92:7d:9f:bf:e7:fd:3c:19:04:d1:bc:
e4:de:c3:c1:95:92:21:c4:45:de:9a:f3:fd:26:78:f3:af:c4:
93:3b:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:16 2025 by rpki-client