Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: YgDGEQG8zINd+Abhgxo/i4XAWu6PLC80ka0ui925JkA=
Subject key identifier: 32:A1:79:56:78:A3:F3:63:C3:ED:7E:F3:E3:69:5F:A1:AC:06:50:8C
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0199FE471752BC3E08DD42E7B33E5154EE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: +4pWlKEmqTQDeJ198khGZGEiwzf/ecO9mk3V7Sr3mRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:17:52:bc:3e:08:dd:42:e7:b3:3e:51:54:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=32a1795678a3f363c3ed7ef3e3695fa1ac06508c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:83:88:56:ec:8c:fd:58:94:85:15:62:04:
e2:a6:b4:4f:44:4a:88:24:d6:ec:9d:9e:8d:39:0a:
01:b9:de:42:1c:d8:a4:de:45:ee:0a:03:7e:c2:f6:
44:c9:ff:d5:4b:d5:d8:ad:f5:fd:cb:58:af:a5:e5:
01:f9:ca:3e:1e:36:de:2a:32:d3:35:46:bc:19:9f:
74:09:85:a4:d3:05:e1:20:b1:85:66:c6:08:77:c9:
0e:fe:d1:14:3f:bf:3a:06:41:a7:d9:2f:2d:a1:75:
b7:7e:d7:01:f0:78:c3:64:cb:0d:0e:48:bf:bc:bc:
a1:d7:05:60:ca:6f:47:98:e5:b2:34:b3:3c:b7:da:
24:59:91:fd:96:98:d2:5b:ea:4c:89:e6:1f:35:7a:
ce:90:47:ac:99:4d:43:8a:c0:9a:90:26:98:44:79:
2f:1b:c2:10:a5:36:30:6a:7e:7c:36:73:cc:5a:30:
fa:9c:c0:73:a9:2c:ea:c8:60:53:a3:e1:ca:ed:38:
cf:0e:6f:5e:3a:bc:d8:96:ba:f2:d9:23:49:77:7d:
1f:e9:66:ad:da:3d:6b:1d:79:4b:d2:0d:74:30:55:
f9:61:f6:1a:9b:54:ad:3d:b0:9e:6b:00:f6:9d:ef:
b2:62:32:54:92:b5:c0:e7:07:27:bb:14:9f:2b:d6:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:79:56:78:A3:F3:63:C3:ED:7E:F3:E3:69:5F:A1:AC:06:50:8C
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bd:ad:74:44:02:e6:32:49:65:1c:10:77:54:7d:6f:03:0d:
13:59:44:fa:cf:1f:73:21:f8:31:03:a8:ec:2c:c8:df:e0:1a:
ae:c6:72:8a:38:57:34:75:5b:a8:fd:f1:03:e5:09:df:cb:c4:
7e:41:d0:00:d8:03:9e:7e:54:6a:33:49:d1:82:e4:ba:8f:7d:
3f:ef:5f:c3:fa:fe:f1:cc:f5:9c:09:d4:7c:be:0e:cc:42:39:
d8:e7:4d:6f:c5:87:8a:e9:0f:19:76:7e:82:92:10:9c:ec:43:
65:40:9c:d7:a6:fd:55:8f:56:7e:65:b4:86:46:cb:28:98:b5:
2e:83:b5:99:53:fc:26:d6:1f:f8:05:51:4a:56:e4:2e:0d:8c:
8b:fb:fe:36:96:4f:84:bc:c1:75:88:43:60:86:9c:8c:ce:a3:
f8:f0:2b:59:d9:e2:9b:34:14:2c:5e:c9:68:c6:d3:73:8a:6f:
2f:54:b5:24:e3:14:71:a0:da:c4:61:a7:9a:e2:67:9f:9c:a2:
d6:99:06:f7:14:c2:f4:14:7e:b6:e0:cf:11:b7:11:8e:2e:88:
9a:95:23:bb:af:1d:fc:82:da:4d:22:26:eb:a5:8d:5f:dd:ce:
3f:6a:b8:d7:41:3a:1a:bf:d8:78:73:f1:55:ff:7a:fe:7f:16:
c7:d3:3e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:56 2025 by rpki-client