Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: iQP+cXO1xPhpF6WWqVA5X/oRFqfijwpy/+xZKMbn3jA=
Subject key identifier: A5:70:D6:38:A0:D7:17:6F:AF:13:B1:07:AD:AB:BC:5B:DE:07:D0:69
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 0199FBEA97BBC13E156FF884F5AFF50397F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: nKxVhRLT19reVu1CKlkYYCPpLpjDy1L/dZQp1srKNjI=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:97:bb:c1:3e:15:6f:f8:84:f5:af:f5:03:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=a570d638a0d7176faf13b107adabbc5bde07d069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:2d:b0:f5:90:c2:3d:36:84:92:48:1f:eb:
7c:96:88:16:4e:b6:00:c0:a3:bc:32:ab:73:cb:b8:
d3:d8:a0:11:89:56:f3:51:57:6a:bf:b3:f5:9b:21:
4c:c3:38:4c:85:0a:93:a3:cd:3d:e6:d0:96:0e:bc:
5f:65:91:93:5d:41:8b:c6:ca:6a:63:1c:d4:75:db:
26:37:09:a6:a6:35:a3:f9:25:62:af:97:69:a2:89:
93:11:37:cb:44:b1:30:f8:80:a1:01:87:e3:b4:03:
e9:d6:1c:5b:15:c7:53:87:fa:4e:8e:b9:64:b2:37:
aa:e9:fa:51:f3:f2:d3:c8:25:8e:be:5e:ca:27:e7:
43:3e:a5:28:8d:44:8d:3a:cf:61:75:93:47:bf:c9:
a1:6b:ff:95:f0:b5:84:42:2e:02:ad:1c:5c:d1:82:
7b:c9:7a:b2:f6:35:c8:06:00:9f:22:9a:f7:57:cf:
37:bd:5d:61:90:e3:71:7c:f9:7e:2c:9c:4b:65:35:
33:64:b7:d7:bd:23:4e:e3:c7:33:89:db:9f:53:ed:
a3:db:f9:de:56:cb:10:b8:62:86:83:e9:43:bf:8d:
5b:1d:4e:aa:4c:9b:f0:18:70:aa:7a:31:e8:7d:9f:
b3:d8:5f:09:c6:6a:13:09:00:13:8e:59:70:0b:27:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:D6:38:A0:D7:17:6F:AF:13:B1:07:AD:AB:BC:5B:DE:07:D0:69
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:90:38:e0:60:3b:3c:fb:d0:60:56:a4:e3:8b:8b:64:78:46:
fc:c8:0c:f3:13:6b:d3:07:3c:e7:78:cc:51:08:8f:ca:5f:30:
1a:04:b5:3a:2c:59:db:ad:5d:ad:a5:a2:76:1f:a0:7d:1e:c7:
73:db:fc:d8:dd:82:79:bc:d7:d8:3d:35:16:25:36:cb:90:fb:
a3:ea:2c:53:ee:1e:18:86:35:51:1b:8c:ab:b1:bd:45:e4:c7:
23:b7:c7:45:55:c2:83:c3:d5:27:eb:e3:55:e3:cb:f0:84:ee:
ed:ea:ec:cd:cc:57:7d:ba:54:53:8c:5d:71:eb:3a:27:6d:7c:
3e:84:9b:05:c9:40:9d:a0:11:47:95:de:f8:d1:22:38:08:d4:
fe:4e:1a:01:90:df:6a:c5:1c:9b:2a:34:47:58:03:79:11:84:
88:1b:e0:43:4d:d2:bc:f8:56:7a:9f:4d:02:4e:13:f9:00:2d:
fd:70:9c:2f:d2:2e:a0:d4:e3:44:6e:b6:71:2e:94:e4:bd:01:
3f:5b:9e:1a:6f:07:1a:7d:13:90:04:87:08:93:54:41:b1:8f:
a9:db:2d:6c:ce:02:f3:c2:29:79:75:41:25:0f:e6:09:07:80:
f0:e5:2c:8c:ef:bb:3b:ef:5e:0e:e5:89:6d:c2:2e:12:e7:a5:
44:8b:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:59 2025 by rpki-client