Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: tP5iyp6gpQIXH005R69XU1jbFKlb2VQpyhQUF83PpE0=
Subject key identifier: 7E:4F:F5:A2:A0:9C:99:3D:1D:53:47:CC:26:FE:44:DB:A1:A0:99:31
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0199FD6B5E935632202EDEC7686C3120799B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:36 +0000
Manifest this update: Sun 19 Oct 2025 17:01:36 +0000
Manifest next update: Mon 20 Oct 2025 17:01:36 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: f14b2UHpf1zNeTYWp+rDdcT4FM5lvfaM3vR/gtzfSsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5e:93:56:32:20:2e:de:c7:68:6c:31:20:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Oct 19 17:01:36 2025 GMT
Not After : Oct 20 17:01:36 2025 GMT
Subject: CN=7e4ff5a2a09c993d1d5347cc26fe44dba1a09931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:38:46:4e:f8:62:fc:0e:a7:02:0d:94:e6:
cf:6f:3a:da:48:d7:19:c5:00:f1:fc:fd:a3:4a:a5:
47:18:2c:43:16:df:c7:28:d6:c5:a0:63:f7:4c:79:
68:06:64:65:f1:94:26:67:20:b3:c1:81:c9:ba:fa:
88:8c:fb:21:64:cd:07:c1:e4:18:02:99:78:17:3c:
44:1e:92:9b:cb:bf:c7:42:ed:cc:80:93:d6:3b:ed:
2e:85:87:0d:f6:5b:24:70:8f:e9:8c:e5:0f:24:64:
62:8c:e7:82:4d:60:f4:47:e3:b7:e1:6a:ae:59:47:
bb:6e:ab:ba:b7:5f:29:b9:82:63:73:d7:e4:8f:fd:
b8:d2:4f:15:2d:33:aa:c0:e6:ac:40:ef:d1:2d:04:
bd:1f:f4:c9:11:3d:1c:7e:69:84:e3:d5:ef:bc:10:
7b:45:08:90:23:1b:2f:4d:47:4c:cc:70:7e:ec:d1:
b3:cb:c5:bb:47:62:86:5e:f7:b9:af:e1:79:7f:05:
f4:5c:bf:6c:f6:4e:fb:ae:04:02:ff:56:35:87:f8:
ed:89:9c:cd:a0:01:8a:9e:b2:96:14:b3:f8:4c:1f:
e9:5b:60:fc:bb:eb:d7:42:7d:7c:f6:9c:41:1b:7f:
64:64:36:fd:f9:36:9b:fe:2b:d9:26:21:e1:4f:6a:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:F5:A2:A0:9C:99:3D:1D:53:47:CC:26:FE:44:DB:A1:A0:99:31
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:6d:ad:4a:06:8f:91:41:3c:ab:2a:5f:cd:19:6d:2b:f1:
e0:ee:cc:d8:36:3e:19:9a:5f:79:d8:72:28:26:49:30:60:06:
ee:ce:b1:47:4e:3e:8d:40:cb:7f:bb:26:c3:2b:5e:be:c8:2f:
2b:40:80:72:64:d8:07:fd:0b:01:88:26:77:12:2d:a5:54:1e:
90:e2:4f:a0:38:99:c2:2b:04:72:28:c4:8e:05:44:7c:0f:0c:
36:c2:39:22:b8:53:be:e8:6f:59:4e:c4:d5:e2:7d:ec:96:7f:
24:a8:8d:99:b0:e6:c3:ed:41:da:df:2a:79:ac:11:66:04:c7:
b7:95:d9:42:6b:6e:26:3e:26:31:3a:9e:d4:96:68:d7:8a:ee:
09:ea:ee:98:b7:16:35:98:19:8d:a0:54:74:3e:31:c7:a1:fe:
ed:a6:e5:7b:b5:b4:ff:a3:ce:20:fc:7e:1b:04:ad:d4:33:7e:
15:02:a2:a2:bc:05:13:c9:44:75:ae:e8:7a:03:6a:2a:e4:87:
92:fa:2f:8f:68:30:5f:ed:ab:83:c8:29:2c:a8:63:71:d0:de:
67:f6:0e:33:b0:74:84:21:b6:3c:c3:e3:40:62:19:4f:f5:88:
42:35:8c:74:af:6f:a0:d2:bb:6b:95:6e:d3:c2:db:3c:5d:fd:
f8:a9:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:26 2025 by rpki-client