Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: 9RXzjmAggvLXrKEmTx66VMSvw5rH0k8TlMBqKm4cgLI=
Subject key identifier: CA:35:E5:7C:FD:6D:53:23:2C:6C:C6:41:4E:2E:2E:D2:BE:6E:4A:4C
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 0199FEEBD4F292F86DB4421AF541136951B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 00:01:32 +0000
Manifest this update: Mon 20 Oct 2025 00:01:32 +0000
Manifest next update: Tue 21 Oct 2025 00:01:32 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: hJlzjcDdEYuXJQGzzl8lRz6xff+aBZvLya67cdgYvwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d4:f2:92:f8:6d:b4:42:1a:f5:41:13:69:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Oct 20 00:01:32 2025 GMT
Not After : Oct 21 00:01:32 2025 GMT
Subject: CN=ca35e57cfd6d53232c6cc6414e2e2ed2be6e4a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:1c:1e:86:29:45:b8:b3:c6:49:5a:09:77:
9e:5f:ad:15:17:88:13:36:91:68:c1:cd:f5:24:52:
0d:10:b5:33:f4:57:1e:80:1f:94:08:51:08:75:71:
6e:36:ed:74:d4:cd:01:f3:91:0b:3a:33:f0:e6:40:
74:42:5a:45:08:80:e3:1f:56:65:06:ce:59:d2:66:
95:f0:f8:54:18:9c:ad:ea:34:fc:19:e3:55:14:77:
fc:09:27:6c:8d:a5:0e:4e:e5:e9:2a:29:87:80:5f:
83:49:c9:d9:dc:9c:30:a3:7b:df:64:ac:db:3d:8a:
0a:4b:b4:ed:1f:9d:0c:6e:dc:e1:7e:af:6c:21:d4:
83:c8:fa:94:3c:d7:95:36:41:a6:d9:46:ee:48:0d:
f2:77:9b:58:8d:72:9a:6a:29:c9:19:34:fd:d0:5d:
07:1c:8e:0b:d6:94:23:3e:fb:bc:bb:30:5f:62:5d:
4b:0c:b6:62:0f:ba:84:9b:70:66:f9:47:eb:90:c4:
7d:b7:48:e8:49:24:b2:04:a0:a3:3c:fa:02:ab:ec:
28:a1:cc:20:19:6a:b9:a0:d1:5a:fd:bb:0b:18:56:
ab:ae:6d:91:1b:0a:4d:3d:b5:9f:00:f2:b5:8e:6e:
29:a6:b0:cb:d3:60:c3:88:30:1e:c4:01:55:78:e7:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:E5:7C:FD:6D:53:23:2C:6C:C6:41:4E:2E:2E:D2:BE:6E:4A:4C
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c5:1b:22:30:a6:72:f2:48:2f:72:3c:91:83:a2:99:3c:8e:
9c:80:cf:97:25:cc:4d:43:9f:62:e4:92:c0:a0:1e:bd:e0:2d:
b3:fa:14:b6:4f:44:a6:c7:ec:43:6a:f1:9a:3b:c5:85:8e:33:
be:43:e5:64:ac:78:ac:6c:c6:c5:bf:0b:92:40:00:21:ce:cc:
75:2b:bd:da:20:58:29:b9:a9:0b:db:6c:87:0b:83:8e:a0:32:
63:0e:74:d3:62:e7:6a:93:54:e3:23:f2:bd:30:20:53:21:8b:
ed:96:11:5e:ef:4d:f5:75:d6:30:b5:52:e2:7c:a2:8d:dd:3b:
d0:f4:49:8b:4b:8b:94:d3:f2:e3:71:41:ff:ed:df:08:fd:e6:
df:ce:2f:bf:46:be:43:85:50:da:61:7d:a2:f2:bf:3a:f7:85:
cb:f1:c3:85:55:da:39:d2:3b:a7:f5:81:1d:cb:b6:21:dd:c1:
83:3d:00:a6:3c:d4:ef:1b:53:53:f2:36:39:09:d5:e3:75:55:
83:b1:5e:38:24:a7:a0:17:f5:5c:60:b7:fe:f1:b4:d6:1b:9d:
04:96:12:6a:8f:27:bb:91:d0:04:12:50:4c:9d:c5:a6:9e:63:
d3:f7:f4:e0:92:3e:d1:42:4f:ab:c2:d9:f7:e2:8e:7e:a6:1a:
78:92:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:05 2025 by rpki-client