Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: beFfg+Pctq/GfTTac7hBdB+gNAHXCazwn4fuABiVyAY=
Subject key identifier: 4A:E6:C3:25:79:BE:FE:5F:75:3B:A7:F7:32:83:65:37:00:FB:79:3E
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0199FBEBE25B6194B3D015A23D183EFD6B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: uC3HtGr9ixHI0stVNHUkMi7618aGSvZ1xFV98khq6So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e2:5b:61:94:b3:d0:15:a2:3d:18:3e:fd:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=4ae6c32579befe5f753ba7f73283653700fb793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:4f:52:f5:f0:61:ce:5a:4f:3e:82:b9:4c:
61:30:83:fd:87:06:d1:c1:89:54:cd:ce:54:80:49:
98:5f:21:0c:e9:6c:c3:96:d2:1a:04:20:d5:24:92:
cf:b4:12:1d:63:93:28:16:e9:50:81:9d:13:39:9e:
fb:f3:2a:a5:1e:3a:20:31:f9:93:69:f8:1c:67:b9:
37:85:df:89:b6:c4:49:d1:f0:71:87:ee:48:bf:43:
f5:4a:f6:5f:10:46:02:22:b7:1a:44:24:2f:fc:7a:
2a:da:99:d6:0f:00:09:c5:4a:62:c8:0c:7b:e3:c3:
bd:58:c5:09:82:e6:64:0f:bc:bb:d7:4c:e5:75:69:
a5:0f:b0:0b:c7:f8:bd:b0:6d:d6:43:5b:6f:d1:87:
24:d9:ad:8d:e7:21:bf:1c:b1:84:9c:a4:72:7f:c9:
f2:1f:84:a6:25:cf:26:e7:76:db:34:57:b6:6f:45:
ac:a5:88:bf:c0:61:fa:2a:68:ed:18:c7:b0:83:fc:
26:ce:b7:a4:e2:98:ba:46:4a:5d:30:0a:07:5c:d3:
23:f2:26:b1:57:41:72:b6:5a:9c:81:d5:ff:2b:05:
a3:99:b1:47:a6:ea:70:cd:2c:57:92:fb:24:02:3a:
bd:c8:81:14:53:5e:2e:8c:ed:11:80:88:27:11:02:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E6:C3:25:79:BE:FE:5F:75:3B:A7:F7:32:83:65:37:00:FB:79:3E
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:40:ea:76:23:11:d3:82:87:29:8a:ed:ab:b8:52:3b:a2:70:
16:c9:f9:76:b4:d4:98:48:1e:79:2a:b3:9d:d3:1e:09:21:bf:
d5:b7:3b:d6:3d:73:46:0c:74:2f:13:f5:79:77:f1:71:30:b0:
60:81:ea:88:9d:e3:e7:ce:d0:af:62:7c:86:c7:89:4d:81:1b:
0a:2e:44:6c:a3:19:00:7e:17:1d:5a:42:6e:9c:88:54:63:07:
b7:47:60:4c:08:ac:f3:ef:c5:84:64:e9:03:6b:4b:ee:72:2c:
a8:2c:ae:e7:05:47:48:ad:bb:5c:10:da:5f:63:07:b2:72:a7:
f1:f8:67:02:b3:ae:47:6d:42:fb:3d:a3:68:07:df:31:30:c7:
26:af:72:3d:79:0b:b5:dd:3c:f9:6f:54:0c:f9:d5:ce:67:6a:
99:8e:f0:7e:ee:14:f9:6c:b1:4e:f0:f8:57:b8:16:cd:75:05:
a3:f4:d7:cf:2e:5e:1c:9b:5d:3b:dc:c1:71:fc:43:b8:f5:48:
1b:87:2e:3d:01:8a:29:b4:58:81:21:57:21:07:de:d6:a9:df:
1f:a8:68:23:1b:34:d4:9c:8c:42:9f:97:05:41:ba:5d:9d:a5:
82:71:01:22:1a:32:3c:1c:9e:a4:53:7f:d3:0b:b5:fb:ee:77:
6c:dd:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:10 2025 by rpki-client