Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: 00hggFIVadZbuBa9Katg/gLAQV4f1eSzWIiVEN2HES0=
Subject key identifier: 16:8A:92:DC:B6:35:7F:D8:26:82:49:28:34:D3:03:27:10:4B:B0:6C
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0199FB7CF63455D3BA5A353FD10FD4973C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: S4M1yLaoUkBNpr3z25JQH_BGArI.roa (hash: u9aDojpNlhB36wlUGghNH/x88dKTjNyPYfwfTMBmtv4=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: OaS2+MfdR42WO6AJWBB4yjMFW0L5dFqDKAlPpgcTbrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f6:34:55:d3:ba:5a:35:3f:d1:0f:d4:97:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=168a92dcb6357fd82682492834d30327104bb06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:d2:0c:42:16:22:12:c1:45:de:95:7c:93:
7a:23:44:c7:51:35:5d:2a:4e:ba:9b:83:87:e9:53:
bd:d5:b9:68:33:06:11:f4:2c:48:d0:d6:18:8d:3f:
bd:e6:f5:a1:39:76:f2:24:c6:f0:a0:55:62:42:5a:
52:1a:27:2a:b4:d7:1b:a3:03:bb:44:46:15:37:37:
75:9d:8f:66:e3:3a:a6:fa:6c:64:9e:ad:50:bc:47:
db:e7:71:5e:1c:3f:05:16:3e:96:94:6f:43:c7:d7:
7b:16:75:87:3e:6e:e7:ac:73:15:36:53:30:ad:7b:
35:fe:70:41:9b:12:4f:bf:50:55:ce:df:6d:0b:68:
97:c5:51:4f:77:4c:d0:ab:aa:a7:de:b8:e2:be:42:
a0:d7:38:7a:0b:7a:0b:58:b7:97:39:22:70:a9:41:
c2:3d:d8:5e:10:07:5f:e2:95:d0:76:11:a3:28:7c:
b1:4d:2a:9d:96:cd:20:65:5b:a8:cc:4a:50:e6:a6:
8a:d2:e3:dd:eb:96:12:f2:cf:13:c7:40:e4:25:b2:
60:23:32:24:72:44:9a:8a:39:09:b9:25:14:7b:ae:
10:01:b8:4e:5c:90:05:ac:b5:6f:f9:d0:4e:38:2b:
97:a8:e2:99:f1:cb:59:31:f4:fd:8e:50:2a:48:fc:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:92:DC:B6:35:7F:D8:26:82:49:28:34:D3:03:27:10:4B:B0:6C
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:7b:cf:be:60:65:3a:2a:53:e6:78:34:c4:7e:30:d7:c2:
21:54:81:7e:4b:ff:88:f5:e5:28:a5:1d:6a:ed:89:87:f5:76:
38:d8:a8:a7:c8:eb:25:7f:0f:b4:cb:33:3f:2a:c9:c2:35:c7:
1e:0e:38:90:a6:69:67:69:5c:04:11:1e:66:d9:c2:cd:ee:9c:
5e:3b:5a:b7:6c:44:a1:c0:1c:14:00:70:c1:ff:e7:19:09:ec:
4d:04:b7:f3:2e:9b:1a:48:3e:48:93:f6:be:6f:20:b8:83:90:
f0:bb:91:9b:22:3b:2a:08:13:d3:c1:3f:5e:79:95:85:c3:0d:
1c:d1:a4:7c:c5:ed:e5:38:e8:70:a1:e5:2b:78:3e:c6:ea:08:
1b:9e:6c:60:79:c6:38:ca:64:26:64:5e:e3:07:d5:f5:25:76:
f7:51:99:dc:5c:ef:3f:c8:dd:b2:1d:05:24:85:8b:13:5e:80:
09:95:23:a8:11:fb:3d:cc:7b:9c:3d:db:37:d3:83:cb:51:dc:
d2:aa:f7:44:ce:cd:5b:fb:f1:06:aa:22:7e:2d:fd:48:f7:02:
b7:5f:43:3d:0c:df:1b:12:a1:2d:85:b9:7a:d3:38:12:6b:b7:
9b:62:cf:30:8a:69:e9:59:24:4c:dd:a8:c7:a9:7d:07:2c:7f:
12:05:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:40 2025 by rpki-client