Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: VB27GTeGdYhRFb97843jb7W15l3dbXVhbcQMXwpGn30=
Subject key identifier: 36:ED:CA:DE:7B:4E:AD:96:DF:21:4D:D9:07:6D:26:57:E1:86:3C:1C
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0199FC58BA24297320C569DEFF9D5896FC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: 9DjQOvsYjQB/8qcyWLYd3jklWLGZCs/Hip20BNRsmAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:24:29:73:20:c5:69:de:ff:9d:58:96:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=36edcade7b4ead96df214dd9076d2657e1863c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:07:ea:5e:77:e7:21:4a:01:78:f9:d8:ca:
03:2b:92:17:78:86:45:15:4d:23:b3:c7:03:b4:ea:
41:30:65:3e:cd:2e:78:8a:4b:d6:ba:d3:5d:8e:0e:
dd:95:5b:32:3f:57:84:d7:e8:2f:e2:95:75:b8:82:
90:9d:61:8d:f7:17:18:d4:e2:9f:c0:8e:cc:70:56:
61:9f:95:96:01:cd:d9:5e:27:cc:a2:70:0c:53:c9:
96:69:c9:e9:02:56:c0:f2:0e:1e:53:49:57:b2:ca:
66:2d:1b:0c:f5:e1:10:a9:73:53:ad:8f:c8:55:0b:
bc:ea:89:41:c4:98:14:0a:b7:60:e5:1c:a7:c2:c5:
af:ae:64:11:92:27:ea:d2:89:73:78:bc:60:a8:df:
70:fa:39:aa:c9:14:c4:d3:31:70:99:28:c8:98:e7:
d3:50:df:7f:f7:d4:05:8c:e4:39:f3:29:c6:a5:73:
e1:21:2b:09:ef:29:77:3c:95:5b:ba:3d:b9:55:eb:
0a:67:47:95:66:88:13:c7:f3:99:26:0d:9e:5d:72:
f8:48:9f:a5:1b:6f:41:26:a9:fd:d2:7f:a9:3e:c5:
8b:2f:c9:b9:3b:82:ae:00:01:67:42:d4:f2:41:bc:
d5:f5:a9:d9:01:e1:22:6d:a7:e7:82:a8:9f:8a:13:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:CA:DE:7B:4E:AD:96:DF:21:4D:D9:07:6D:26:57:E1:86:3C:1C
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:39:81:a1:98:9d:9f:a9:19:6b:32:59:dd:9f:82:34:d9:df:
71:29:d4:b7:b1:f7:8f:bf:76:b6:2e:2f:bc:fe:1b:16:83:70:
19:92:0c:08:70:89:d8:44:6d:de:c6:39:3b:17:d7:0f:9a:6d:
5d:7e:dc:32:ce:25:4e:c5:00:d5:7b:b5:8d:94:c6:1a:91:8b:
a7:7a:87:74:c8:c2:09:00:60:8c:90:c3:77:b8:09:82:73:06:
df:52:5b:63:8c:5f:ee:80:93:29:62:f1:a2:0e:35:15:ac:3a:
4f:9a:64:17:d4:db:dc:1d:1c:ef:0c:0b:40:7a:6d:b2:73:78:
b6:35:4e:36:29:a8:c2:1b:c4:9f:09:8a:c5:3e:07:0f:d6:e6:
70:43:b6:b4:ef:f0:ef:9a:56:4d:f4:12:ed:d3:03:76:16:f0:
25:65:b0:ea:80:69:7c:a2:d0:a9:40:c3:74:17:37:5a:ee:4b:
6a:80:90:a8:1f:28:9e:57:82:e9:5f:39:28:e5:9a:d6:dd:cd:
41:8b:8e:a1:52:83:24:56:ea:d4:62:6e:4e:86:ca:6b:ad:2f:
09:42:11:81:a8:63:57:d4:ec:9a:4d:66:b0:60:a3:9e:6a:5a:
bf:27:2b:10:73:2d:6b:2b:4e:f3:84:29:47:28:9d:a2:25:8b:
fd:f7:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:49 2025 by rpki-client