Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: ETZdUO0v82KkbjCFYd1zUwMaiX1cyOEJWLVe8/42DmQ=
Subject key identifier: C5:0B:13:7E:FD:0D:78:55:40:3E:58:DD:C8:69:79:43:D9:23:AE:1E
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0199FC8F3732DF3F441760A2519252F7E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: XAv33rGGmo+DtpK3Q/hT4zl8gXLjdcyIm9NxPxJT8ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:37:32:df:3f:44:17:60:a2:51:92:52:f7:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=c50b137efd0d7855403e58ddc8697943d923ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7f:92:6a:22:c1:85:ec:62:e7:30:a3:7e:d7:
07:58:c7:dc:ed:de:66:0d:d6:6b:d8:66:7b:c6:ca:
58:23:c9:45:08:3a:05:0e:74:ca:a1:4e:ff:77:57:
a7:d8:de:51:d0:58:17:02:5e:31:e0:eb:28:71:73:
7c:77:ad:2e:eb:f5:aa:53:a2:c7:b0:9c:4a:36:f9:
e9:c0:29:2f:59:46:c3:fb:9b:c0:28:ae:6b:fc:6c:
c8:3e:f5:39:d8:6b:c7:4e:84:62:bd:ab:cd:b5:78:
e0:e4:0b:0f:5c:35:6e:07:3a:f9:53:a4:70:d4:03:
af:79:a3:a1:f3:a2:5b:e2:b0:be:9d:ed:31:dc:e4:
c7:c1:56:07:3b:68:bf:ed:1b:74:98:0e:72:e4:10:
3d:a6:a6:7b:3e:64:b8:00:82:84:4f:7b:d2:83:a9:
b2:10:d3:b4:cb:ae:1d:a2:67:b7:d5:77:90:50:a8:
e7:13:37:b7:88:ec:97:1a:69:33:73:b7:8a:51:a2:
f1:0e:a2:8a:65:9f:25:f1:ca:05:95:99:27:35:0e:
b4:4b:29:64:86:41:78:c2:fb:39:a9:7f:18:26:5b:
0c:eb:cf:c5:7d:d1:4e:2f:18:d3:ab:a3:64:bf:07:
34:d8:b9:1b:80:91:6e:ff:b7:8e:e7:ab:cb:d1:07:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:13:7E:FD:0D:78:55:40:3E:58:DD:C8:69:79:43:D9:23:AE:1E
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:43:e8:f1:75:52:aa:6e:6b:f9:00:96:58:e4:b2:77:65:1b:
59:40:60:0c:8a:76:24:72:2d:64:f7:83:9a:1a:05:fb:9e:d0:
20:3e:0d:91:a6:40:12:79:02:c5:c9:3f:ba:ac:cf:f3:bc:ad:
ad:4e:36:ee:4c:a6:6c:c9:18:a9:72:9f:b7:2e:18:d7:28:c9:
50:82:95:81:b2:b5:d3:7f:6e:5b:6c:16:c9:bb:ef:84:e9:13:
dd:f7:29:b6:c9:9b:6e:44:06:b3:58:f6:5e:0c:06:bb:c0:9e:
df:b2:c0:2d:fb:ee:3b:f4:16:64:4a:17:84:8a:54:d9:45:96:
fc:dc:24:36:fd:3a:6f:9c:b9:17:ba:2f:14:83:bf:1a:65:1a:
37:76:f9:9c:32:d0:19:a6:be:3b:0d:98:e4:bb:2c:df:cb:ae:
e3:e6:30:eb:28:ef:7d:d2:fb:61:cc:9b:44:15:53:e1:00:f2:
d0:3a:ee:fa:2a:6a:9d:2c:ae:d4:c3:11:3a:af:6e:fd:13:0d:
38:ea:e8:76:2a:ae:74:9b:71:56:7f:6e:d6:ae:a8:0c:6a:f7:
88:1b:b8:11:e3:69:20:ba:d6:0b:a7:63:79:89:75:a3:49:68:
5c:b6:e6:3d:ff:36:8f:a2:27:77:1d:32:7a:ef:9f:37:8a:c1:
4e:94:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:38 2025 by rpki-client