Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: QuapGWtwrDkywK28rwUoCkx0eI/6peAqLiVMWVefz+c=
Subject key identifier: 0F:B2:C0:0E:E1:56:52:CB:A5:3E:8E:6D:A0:87:88:BD:78:1D:72:40
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0199FAD7B8A50CB5F1504917D58E43C509A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:05 +0000
Manifest this update: Sun 19 Oct 2025 05:01:05 +0000
Manifest next update: Mon 20 Oct 2025 05:01:05 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: JAltFN9K3oE74+fl/uX/2MNGGrRi/R7QvFo4R6mUosk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b8:a5:0c:b5:f1:50:49:17:d5:8e:43:c5:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Oct 19 05:01:05 2025 GMT
Not After : Oct 20 05:01:05 2025 GMT
Subject: CN=0fb2c00ee15652cba53e8e6da08788bd781d7240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:81:85:bc:2d:f5:3b:87:34:60:8a:70:61:
75:d0:64:13:28:3b:5a:d1:dc:73:51:b4:f3:53:1d:
dc:7d:d0:08:b0:98:f5:b0:34:e0:0c:0d:c0:ff:4b:
25:fb:75:dc:9f:b5:a0:76:97:dc:3e:0c:b6:29:e9:
eb:27:77:f1:ad:07:92:e4:cc:b6:bb:a0:49:2e:48:
ea:5f:20:ef:52:32:50:a9:7d:81:9f:88:c8:55:c8:
94:89:e4:29:5c:e0:65:55:28:d9:1c:5b:da:d1:29:
55:01:42:a0:4b:5b:3f:e2:63:5f:50:2d:31:cc:76:
be:23:e3:1b:72:f1:e2:e3:37:bd:e3:7b:d3:d4:33:
a3:25:f1:3a:39:fe:71:ff:d9:f4:8a:c5:24:02:5c:
5a:9f:6b:d6:85:6c:df:58:ff:f5:cb:65:db:17:34:
49:9c:89:8d:22:20:5d:6a:17:00:cd:0f:45:fa:79:
e6:26:e7:04:2b:b5:ad:42:a9:39:8d:db:12:12:f4:
6e:24:78:6f:a7:0f:9a:21:77:65:3b:04:cf:ed:80:
f1:79:35:df:e4:6f:72:21:f7:44:3c:63:aa:25:0b:
12:16:2d:1e:db:7f:cd:7e:cb:4e:09:92:0e:4e:b8:
c8:26:24:99:91:40:55:c4:6d:51:ac:29:bd:13:3f:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:C0:0E:E1:56:52:CB:A5:3E:8E:6D:A0:87:88:BD:78:1D:72:40
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:f8:6f:91:85:00:30:fd:d7:2b:2e:20:07:7d:ac:2f:17:
ce:60:fc:df:2f:88:0c:a3:bd:01:32:16:ba:f0:57:98:1b:61:
a8:fa:a7:2f:3b:5c:34:50:c8:73:42:75:14:c7:70:c9:b2:eb:
82:c0:9b:76:7f:6f:dd:04:64:11:03:f9:9a:dd:2f:13:73:37:
80:8c:dc:c0:b7:cd:c7:da:93:2a:86:62:10:db:01:b2:65:7d:
c3:54:c2:27:da:85:91:ab:eb:c9:90:fe:9b:25:81:49:9a:5f:
b7:b5:d0:d2:2c:08:50:e7:2d:eb:1b:a8:81:01:87:97:1e:0f:
5a:75:1a:cc:52:d0:3f:42:52:99:a9:24:ab:47:8a:a2:29:88:
cc:b7:6f:a6:9e:0e:8a:28:f0:09:1f:a6:39:f7:61:e1:66:53:
9c:76:da:b6:84:56:31:90:44:84:94:75:28:23:9e:e8:35:05:
89:d8:17:83:1a:31:13:6d:99:27:fb:6d:ac:33:7e:aa:7e:c9:
f8:a1:6c:39:1b:9a:6a:09:5c:a4:21:ed:30:da:2f:0b:2d:c5:
16:54:70:6c:8f:77:07:ab:d4:8c:36:0d:a1:fc:15:d4:2d:c8:
20:c1:b7:81:4d:a9:d7:7a:fb:36:a7:d9:0c:26:b3:a7:ca:6b:
81:d1:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:11 2025 by rpki-client