Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: S4V5NbdQ4MZADllrUzu4bfB4de4Mppr43Q2Gx1fAYMQ=
Subject key identifier: A1:2A:B7:73:FE:CE:B1:BB:58:A5:3A:4D:53:FD:4E:82:C9:B0:4C:BC
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 0199FEEBAC1D42B557B1CD3A7D6AECBB01B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 16B4
Signing time: Mon 20 Oct 2025 00:01:21 +0000
Manifest this update: Mon 20 Oct 2025 00:01:21 +0000
Manifest next update: Tue 21 Oct 2025 00:01:21 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: t2kpG6kVuqfPShxU3e3ERgckMGr92/kIzO9gQCWHmg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ac:1d:42:b5:57:b1:cd:3a:7d:6a:ec:bb:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Oct 20 00:01:21 2025 GMT
Not After : Oct 21 00:01:21 2025 GMT
Subject: CN=a12ab773feceb1bb58a53a4d53fd4e82c9b04cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:2c:d8:ba:97:df:79:99:ab:50:8b:35:4a:
aa:8f:d9:a7:61:96:f4:33:56:6f:81:4c:60:e9:88:
0c:16:b7:c1:9f:7f:d8:fc:d8:01:fe:ba:78:30:0f:
10:a2:06:a8:0e:07:fc:a8:3a:94:cd:26:2d:9e:3b:
bd:be:ea:ac:82:01:c0:ee:aa:2d:31:45:7c:f2:98:
f2:9b:ba:c2:24:c5:bc:51:9d:32:91:98:f0:d7:6b:
27:3f:66:02:82:a3:aa:1d:ba:67:08:22:05:4c:37:
3a:5a:82:12:f7:4f:aa:0b:4c:12:aa:a4:5a:34:5d:
4c:9d:e0:b0:07:54:ad:7a:15:36:68:f8:19:6c:57:
e7:0d:bf:9e:e8:6c:0c:30:0a:90:9d:c7:30:de:08:
7c:b2:61:51:3a:13:4f:68:8b:a2:b7:02:a2:0d:e1:
60:80:6a:65:94:fb:bb:84:9d:44:66:60:ad:9a:26:
03:67:37:ba:ef:a0:b9:b8:4d:b5:58:37:a1:f5:a6:
ee:7a:b6:2a:2b:18:2b:b6:98:95:c8:09:d7:6b:90:
12:7d:32:82:35:bd:d5:b5:de:9c:2b:11:59:44:59:
16:f3:93:3a:45:a7:1e:43:2c:ac:fc:43:35:6e:4a:
bf:5c:e3:6e:cb:fa:49:06:15:f2:7e:59:15:f2:78:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:B7:73:FE:CE:B1:BB:58:A5:3A:4D:53:FD:4E:82:C9:B0:4C:BC
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a6:96:ac:6f:da:0b:0d:7c:56:a2:33:f3:1b:f5:26:53:3f:
f5:c5:2f:fb:ec:8d:65:e8:bc:c4:15:41:31:11:3e:e1:7c:08:
b2:4f:c1:1b:f7:87:ca:af:31:78:0f:df:65:f3:22:9d:dd:71:
85:7d:83:8d:0c:f4:38:01:9b:11:d4:f1:2f:f4:ae:21:20:a3:
64:ed:33:56:be:83:43:d8:d7:a0:9a:b2:79:0c:af:9c:a4:08:
46:ac:ec:42:a5:45:13:01:dd:f1:34:3d:14:15:15:9d:38:cf:
af:0f:e9:1e:5d:cc:48:c0:1a:15:ff:6e:32:c3:76:22:f7:c5:
61:99:7f:5d:16:12:dd:4c:d3:17:62:4a:7d:70:14:e3:a6:23:
97:ec:9f:2f:9a:b8:ed:ca:f9:30:47:8c:af:ea:e7:0b:cb:69:
60:a6:4c:e1:df:5c:cc:c5:1f:d4:89:c9:95:03:d1:a6:6e:21:
3a:a5:1f:76:34:ca:5d:ee:eb:bf:8e:a8:d9:f7:2e:a6:13:cb:
65:1e:a9:bf:5b:91:35:9f:ce:27:5a:f3:7b:9e:09:aa:7c:ee:
dd:8a:b9:eb:27:8d:63:f5:c1:a1:03:ca:9b:85:86:9f:34:7c:
cf:43:14:7d:a1:28:06:38:b4:d6:41:7b:a1:b9:c8:4a:ad:75:
23:75:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:02 2025 by rpki-client