Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: Xg6grh5qK/tZ2wmdER8xBHVm/J83DG5J0/xMEBXNh1w=
Subject key identifier: 1A:83:5A:6D:9A:0E:23:C8:79:EC:89:06:4F:DA:BA:17:3E:86:44:8E
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 0199FC2166B0B5CABFBFD4808B1B1519E6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: tdYhfgjPoY3AeVj2dj7jsDVBbj+z3SYQspSWO4iejAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:66:b0:b5:ca:bf:bf:d4:80:8b:1b:15:19:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=1a835a6d9a0e23c879ec89064fdaba173e86448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:49:1c:1f:c2:40:22:f5:81:3c:b5:bc:ad:
9e:73:e7:e8:90:eb:cb:61:94:05:75:2b:df:bf:10:
65:57:db:e4:9a:ef:f0:80:d7:a1:37:63:a7:7d:91:
bb:38:6b:da:f9:88:8b:5b:84:ea:42:10:57:06:eb:
8b:82:43:43:fc:80:7a:28:ea:24:17:b4:17:f7:8e:
ea:1b:f1:50:e1:69:96:c3:8c:64:dc:b6:a1:50:a9:
cd:9a:07:92:94:d9:d2:5b:94:68:e4:07:eb:42:85:
e6:7a:bd:ff:ec:a9:30:38:ad:2b:bc:ea:e1:34:a0:
d2:ea:20:56:e3:94:85:94:0a:2c:0e:0a:07:2b:64:
04:8f:f4:2e:3c:ee:45:5e:48:93:9e:c6:8a:da:ad:
d2:b4:82:8b:7f:be:a8:0e:86:f4:07:8e:78:8a:fe:
3c:f5:89:3c:97:ab:5b:24:fe:be:b3:f8:27:e1:61:
74:60:30:de:15:b8:79:a6:8a:fd:3e:ed:c2:fc:40:
c6:24:a9:d5:bb:c4:9b:2b:0c:a1:f8:64:1a:be:26:
53:1a:29:2c:b1:f0:b0:d1:c6:88:6d:3c:ca:da:46:
24:4e:d4:7f:5a:3e:9e:dc:67:86:98:c9:28:e1:30:
3f:a4:84:79:8a:9f:1b:65:7b:95:a9:dd:26:5f:f3:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:5A:6D:9A:0E:23:C8:79:EC:89:06:4F:DA:BA:17:3E:86:44:8E
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:73:01:90:4f:aa:ce:71:7a:10:f2:19:fd:80:d8:35:50:
6d:cc:62:99:7b:9b:95:f5:04:95:c2:b5:89:7e:70:7f:ed:05:
b7:c1:86:65:bd:bb:1d:ee:9c:0e:54:a9:39:f4:58:d7:4f:f9:
d9:bf:91:a4:e7:19:45:2b:3e:35:8a:19:e7:bc:87:d1:02:68:
d3:91:a5:03:d8:a3:bc:f2:34:01:9e:00:2a:21:f3:50:13:dc:
e0:0c:7a:6e:68:bd:a0:cd:bb:7b:82:bd:ef:81:08:34:52:9e:
d6:ee:88:df:ca:2a:cf:f5:c8:c4:02:0c:41:10:4a:c8:b6:84:
8c:e3:ba:cc:cf:0d:4c:cb:39:eb:52:ca:88:5b:3c:58:22:47:
3f:71:3d:fe:b8:5c:15:8d:7e:10:ef:70:b9:0c:14:52:ee:b3:
01:0d:13:84:d8:69:7f:46:55:2c:c0:c9:3a:b4:97:c3:03:64:
49:27:f5:c9:1c:84:8c:2c:58:a7:b7:6a:3a:2d:c3:51:e1:b7:
c9:49:1b:80:d2:7e:4f:02:6c:db:d5:e2:43:da:78:9e:37:39:
65:05:e6:69:ed:1f:ec:aa:af:fe:cc:34:43:ec:61:89:5d:ea:
97:7a:3b:4f:0a:a3:4c:fb:a7:21:da:01:03:1c:27:05:af:f9:
02:57:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client