Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: 1brIdvaSlXD4LszmhvDn7ADonvUrgYpOEuqSC1VoLls=
Subject key identifier: D9:FD:F2:F9:0F:1D:54:B3:73:82:84:1F:DB:D4:12:DC:4D:75:03:54
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0199FFC8408A505F11B7B0AB387F0EB244BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 170E
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: HBaA8uvM0hk/reG7VWJIHC5wea8KmSlUhjYxYRNfmz8=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:40:8a:50:5f:11:b7:b0:ab:38:7f:0e:b2:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=d9fdf2f90f1d54b37382841fdbd412dc4d750354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:be:0b:3b:b1:fc:dd:47:a6:58:84:fb:86:
44:01:9b:4e:e7:e4:46:49:a1:10:2b:51:c4:5f:69:
18:d8:34:c1:16:1f:cc:db:78:93:2b:54:f3:5a:9b:
d0:e5:6d:1d:85:dc:99:4e:ba:55:d5:dd:6e:5c:97:
09:76:ef:12:43:cd:6b:13:e9:29:2e:f0:7d:ca:67:
11:31:9c:ba:ed:e1:ac:17:70:31:0f:13:c0:0f:d3:
f7:e0:c1:c7:50:4e:ec:7a:95:3a:2a:79:e1:c8:e9:
67:42:b3:ab:fb:a1:54:b2:42:50:a6:5a:4c:6f:b7:
c0:76:73:5d:e4:93:5a:5a:34:54:1d:44:62:ce:a8:
7e:1b:6d:7c:aa:11:e6:0a:b5:8e:c2:5d:98:4a:e8:
e8:1d:9b:5d:33:60:49:25:05:85:d7:81:23:07:1f:
31:f7:9e:b0:2f:a9:7f:d0:d8:8d:89:5c:06:ca:3d:
f2:bd:34:2a:00:2d:ed:fe:6b:20:fc:48:d0:c2:d7:
fa:eb:6c:ff:d4:27:5d:e5:82:b0:65:3e:b6:40:12:
0f:60:5e:b1:f1:4c:59:c4:92:f0:db:f3:09:2d:c2:
d4:ef:5c:46:c5:73:e8:4b:41:49:aa:1f:ec:99:2b:
b5:a5:89:ba:77:c8:ed:f1:9e:c0:11:d4:b2:8d:93:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:F2:F9:0F:1D:54:B3:73:82:84:1F:DB:D4:12:DC:4D:75:03:54
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2e:48:58:a3:b4:37:e2:21:70:29:bf:00:ee:49:af:b4:01:
b1:f4:29:ea:88:15:e1:e1:4e:21:22:9c:ff:ea:b0:b7:fc:da:
45:3a:2a:73:ca:15:38:ac:60:25:60:c6:53:bb:b7:d2:6e:43:
a0:f8:2f:22:93:60:f6:0b:cb:89:9a:ef:3e:2c:8e:52:3d:93:
a0:83:02:6b:19:f0:fb:c5:1c:94:dc:97:d8:f5:70:a4:96:52:
19:f5:f1:76:ef:40:2e:d7:43:33:12:19:4e:5d:86:56:43:58:
14:a4:d0:8d:1c:18:d5:d0:28:e3:9b:ed:ff:aa:28:98:9e:ca:
69:b6:e2:67:2d:9c:51:01:1a:b1:ae:cf:50:5a:6f:49:2c:b6:
8c:00:8e:cc:1c:96:9c:30:4b:6c:61:99:2c:c1:22:64:c4:aa:
36:ef:d9:1c:b8:89:b2:84:87:ea:93:13:cf:9e:0b:b0:be:44:
92:00:6f:33:c6:62:a3:f9:5d:87:4a:43:3d:3d:bf:12:90:83:
04:2b:8d:45:55:cb:ff:7c:56:40:96:ce:ad:75:a6:fe:3e:22:
db:a2:8b:55:b7:60:fc:fd:bb:c5:f6:86:9d:a2:84:1b:ce:07:
94:b2:e6:88:a8:d9:a2:c0:f3:be:86:8a:0f:72:67:53:00:25:
01:cc:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:48 2025 by rpki-client