
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: tF8nfy/42tzgKmL84d8ITGnDdgFVbOVe2heQcMs7jMM=
Subject key identifier: 0B:D6:F1:6F:08:94:E5:3F:12:69:BF:E1:D5:94:73:07:12:12:BD:3C
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 0199FBEAFF31D5B8A46942204DA1FCC3E5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 14CA
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: kQCOutR+rUlFmVPwwtQEdvOyovnfJkNgwDKHIDS4o0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ff:31:d5:b8:a4:69:42:20:4d:a1:fc:c3:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=0bd6f16f0894e53f1269bfe1d59473071212bd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:0c:bb:c1:ed:fb:5f:a2:a1:4b:d5:09:d7:
15:3d:93:31:30:9e:0d:51:bc:d3:2f:0f:1c:9d:97:
37:50:d6:78:92:c8:4b:33:5a:7d:15:97:ab:c6:d5:
77:80:56:ba:29:87:9d:6f:a6:eb:ef:61:f3:84:76:
32:17:48:eb:2c:6f:a9:4f:98:27:74:8a:31:96:c5:
9f:33:aa:79:9f:41:44:53:33:00:bc:d3:16:02:d4:
b3:c5:8a:fb:f7:19:99:bf:54:d3:5d:6f:e4:99:28:
52:d0:c8:9f:b8:0b:5d:49:f0:74:00:b5:ca:99:59:
05:a4:07:80:52:19:c1:cc:0e:7d:e5:d5:c1:17:fc:
48:0d:53:72:48:2c:b0:ec:00:4b:83:83:78:0b:e8:
bb:fd:3c:5e:49:41:e0:cb:bb:f5:2d:d3:16:20:e9:
17:7f:ea:80:1d:59:3f:c0:b8:8c:ef:e5:e1:ef:5a:
05:53:2d:f5:d5:2c:bc:52:47:82:ca:05:fc:fd:92:
99:1f:40:ea:e6:b1:99:19:49:6a:af:2b:f2:96:cf:
68:84:ac:87:57:54:38:f5:3e:05:41:26:d2:20:b5:
86:80:cd:25:8b:a8:7d:06:a6:7e:b9:dd:5c:68:95:
33:32:93:bf:97:e1:58:d2:08:26:8b:a5:46:26:79:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:F1:6F:08:94:E5:3F:12:69:BF:E1:D5:94:73:07:12:12:BD:3C
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d6:c7:ee:5a:79:01:4f:99:4b:45:b1:1d:53:bc:29:37:16:
a5:ea:2d:7a:0d:da:c5:77:69:3d:04:71:75:6d:37:86:8b:f8:
19:99:d5:58:f1:d7:2b:c6:f8:ed:d1:31:5d:a9:b5:42:67:e6:
43:b9:bb:37:24:31:29:d4:65:e8:57:2e:31:2f:09:79:47:97:
ee:c4:80:3f:2e:42:c8:33:1a:eb:be:20:d9:da:fe:53:ad:7f:
6a:e3:a2:aa:a0:26:d0:da:c6:09:01:4e:c3:72:e7:97:68:c8:
91:0f:a5:11:62:ed:83:f2:e8:72:31:61:68:05:5a:b2:9d:36:
82:73:0c:10:cc:76:59:ce:8d:a7:3d:d2:37:fb:c0:91:31:87:
6f:94:4f:27:e7:6e:d2:73:1f:36:3d:54:ea:34:83:e6:80:a9:
19:29:d6:b7:07:2a:99:a9:30:d8:7b:31:8b:21:eb:c3:17:4a:
d4:7f:c2:fa:f4:ab:9e:8b:e6:11:8d:e8:c0:8f:db:4d:19:32:
99:5a:89:3b:f5:15:a8:d4:d7:12:1d:11:de:bb:0e:8a:78:28:
7d:96:bf:91:42:5d:5e:e0:23:21:56:f0:00:83:5d:8d:d6:6c:
b7:3c:f3:1e:dc:c2:dc:86:c6:6f:84:ff:66:18:ed:95:d7:96:
a6:fa:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:54 2025 by rpki-client