Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier: q2fgS7Cl47yyXUuri/aC7DQZHO6HXPZoUXN3IFxMv2k=
Subject key identifier: BC:C2:6D:B3:30:74:BF:33:4C:5A:BE:FF:6E:2F:F6:C6:8F:4A:45:97
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 0199FFC7FF7F6F86C52043D0F5747CDDC6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 04:02:00 +0000
Manifest this update: Mon 20 Oct 2025 04:02:00 +0000
Manifest next update: Tue 21 Oct 2025 04:02:00 +0000
Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: PQar0v6DUQmKnVf0i7J5aBYJHHer1GuEboIR+SKHJmM=)
2: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (hash: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ff:7f:6f:86:c5:20:43:d0:f5:74:7c:dd:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Oct 20 04:02:00 2025 GMT
Not After : Oct 21 04:02:00 2025 GMT
Subject: CN=bcc26db33074bf334c5abeff6e2ff6c68f4a4597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:ea:f2:31:d4:d3:b3:d4:92:83:84:c3:a9:
6c:e8:45:f1:bc:f8:7a:39:ce:be:9e:7d:84:a1:bc:
7b:98:97:52:3e:27:c7:de:d1:eb:01:a6:b0:a4:ea:
f2:dd:d1:af:b8:59:55:0a:d6:69:ba:14:7c:ba:41:
e9:fc:ff:28:2f:52:bf:87:1d:fc:3f:83:8e:44:5f:
18:ef:8f:e0:d5:24:2f:65:a0:ef:9e:f9:08:03:8e:
91:33:bf:50:f6:4d:1f:15:be:38:7b:b7:79:14:03:
85:73:9e:42:25:eb:97:78:b1:a8:9f:d5:e6:d8:95:
7d:96:98:4a:6e:15:f4:ec:d2:0e:9b:dd:c9:1f:bb:
35:9f:40:82:db:2a:eb:70:4b:68:3c:a7:0e:9d:78:
6b:0f:d7:dc:98:c8:b2:9b:75:5b:3c:92:33:56:52:
25:92:10:5b:2e:08:15:81:86:85:56:ad:ed:23:61:
c6:be:54:7a:36:e8:99:c1:43:41:1b:0a:01:db:f9:
bc:2d:6f:fc:c5:eb:fb:f3:8c:36:c0:ea:59:96:fa:
4d:a9:db:47:92:63:fb:d6:f6:96:2f:39:99:9a:a9:
81:63:11:de:39:ae:db:d6:45:6c:00:64:77:ff:3b:
ed:4f:f7:1d:f6:14:f8:df:d3:58:cc:17:29:40:4c:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:6D:B3:30:74:BF:33:4C:5A:BE:FF:6E:2F:F6:C6:8F:4A:45:97
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4e:9f:7d:46:b4:7e:9a:1b:d1:00:ac:dc:f5:bf:3e:79:85:
ec:82:0a:f2:b5:64:41:c6:33:ed:d4:9d:29:70:9a:3c:2e:56:
79:78:dc:f9:01:bb:97:f3:ff:34:5a:e7:23:8c:e7:7b:d5:67:
4a:f6:f9:03:18:44:9d:65:6e:df:e2:2f:6f:ef:a2:48:fd:1f:
e2:d3:6a:39:f0:8d:b2:44:41:fe:3d:63:af:22:c0:1d:c3:e4:
27:d4:72:6d:ff:9b:77:0f:d5:87:34:4b:93:49:b6:d5:5c:6e:
8b:4a:76:59:46:bf:ce:49:88:0c:c4:fa:80:b9:88:b0:83:7e:
86:da:29:91:b8:e2:93:e2:fb:f1:05:57:d1:8a:2e:06:4b:d3:
38:e9:4f:b7:4b:11:72:89:29:dd:78:10:aa:c9:68:fa:3b:9b:
20:af:0c:28:be:12:6c:40:08:b0:47:0d:8c:5c:b7:2d:67:e4:
19:41:e5:80:90:e7:b2:df:67:3e:2c:8d:7a:1c:c7:04:d6:37:
57:3d:6f:47:4d:51:7f:37:e5:87:be:44:00:4c:c4:d5:62:bb:
58:08:bf:07:c4:87:6d:10:7a:95:c5:fb:30:cc:7e:e9:ea:da:
e1:da:08:8e:3a:53:3b:73:29:cd:28:db:e1:0c:fb:22:b5:46:
9b:27:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:10 2025 by rpki-client