Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: ZuTVJJjqctRLcKxv4GTI54t9FGyKCi5x3AJuYbtOdFw=
Subject key identifier: D0:44:31:0B:31:6E:B3:17:0A:C7:8C:03:94:FC:3C:35:BD:CB:5D:45
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0199FBEBAAD32C972A0C0E0C173295E8C3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 7zDvQjEv5jdQgCx2UUzDINR6U/spYxqPrRAsFSNoa+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:aa:d3:2c:97:2a:0c:0e:0c:17:32:95:e8:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=d044310b316eb3170ac78c0394fc3c35bdcb5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:6c:68:b1:ba:41:13:0f:5e:25:37:8f:0f:
cc:52:4c:b6:96:31:0c:bf:a1:cc:6f:4e:dd:12:6f:
58:d9:46:9e:9d:5a:9b:26:d0:14:e1:2f:00:8c:18:
73:bd:bc:3f:e2:ac:4d:b6:34:52:8a:0a:f4:bd:24:
b8:9b:18:83:4e:7b:02:d9:2e:95:28:08:89:8c:17:
71:41:a8:37:7b:80:f0:05:2c:8d:af:ee:e9:6f:d2:
63:b4:c7:d7:de:38:e6:28:3d:3f:b5:d8:26:54:aa:
3c:04:54:1d:ea:c3:eb:55:bc:b1:50:25:74:4c:9c:
48:3e:cc:c9:39:1b:b7:18:f3:ee:2a:7d:d5:97:d6:
b0:59:30:5a:45:ae:a4:03:1a:1c:82:c9:00:5c:c2:
7e:25:25:d0:e7:1d:a5:25:d8:a6:0d:a2:87:b4:38:
03:8d:b5:28:f3:f7:e2:91:17:29:25:60:d2:00:1e:
15:98:12:f2:6b:da:0a:f0:5a:f7:c4:d4:a4:37:99:
94:ba:6b:33:d4:43:77:dd:b5:83:e9:83:03:74:23:
26:95:54:4a:08:2a:fd:a1:63:c5:84:2d:d5:58:86:
38:24:1c:95:8d:47:e5:fb:22:89:98:c3:87:27:ac:
a8:7d:2f:28:f5:52:48:0a:91:cc:13:88:bd:ba:76:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:31:0B:31:6E:B3:17:0A:C7:8C:03:94:FC:3C:35:BD:CB:5D:45
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:da:46:e2:22:af:87:ff:5e:1b:5f:7b:6a:16:fa:6e:0d:
5a:ad:34:8d:1f:04:87:2d:d6:5e:20:a9:f6:76:58:28:9f:a1:
5d:65:8f:07:a7:6e:c7:ec:11:21:be:b9:eb:a8:76:b1:12:b0:
01:6d:72:3a:37:ce:05:e5:2e:02:8c:b7:3b:6f:67:19:6e:42:
c4:f8:f8:3e:76:9b:1f:1f:b4:a9:89:0b:97:d5:27:10:5e:d0:
44:31:96:9d:34:4e:cb:b6:28:a7:a7:27:a6:89:3e:ad:e2:a0:
a8:ad:47:9a:a7:95:5e:33:37:dd:71:48:b0:fe:33:85:d8:41:
20:8b:13:5c:c0:80:63:d1:f0:71:97:21:11:5e:ae:01:68:18:
28:cf:e8:53:8d:ae:24:33:4a:8c:f9:a9:db:cc:e5:ba:d5:b9:
f7:b4:3e:58:d6:09:c9:ec:4d:ce:37:cb:8b:52:89:ef:7d:07:
3d:ae:64:a2:81:f3:80:db:f8:ca:d0:f6:e7:37:14:81:33:27:
f1:85:e3:b9:7c:e7:30:0f:39:97:24:ef:05:07:18:50:28:84:
94:26:eb:18:b4:47:4b:e6:cf:17:71:50:e4:5a:4f:35:34:a3:
b8:07:55:f8:a5:19:58:e4:c9:92:8c:67:29:4e:2e:85:39:56:
68:2f:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:06 2025 by rpki-client