Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: GjlsLn2Dy370s45bPflY+6F0YHcuqT0LtOxQ91kyuY0=
Subject key identifier: 49:D6:B2:8B:C6:04:DB:42:99:76:C2:45:F2:39:87:AE:F8:D7:3D:09
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 0199FCC6622C198BF988D07483A30E0B50A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: Lz0YA3SCWFv7E4wpQdLVJ713GkmfGYaU/JJz3/TADtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:62:2c:19:8b:f9:88:d0:74:83:a3:0e:0b:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=49d6b28bc604db429976c245f23987aef8d73d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:5f:90:8d:61:1b:64:f5:a1:e1:1f:30:c9:
34:3e:3e:fd:1b:a9:84:35:bb:ca:7a:07:a8:34:40:
a1:ca:4f:5f:09:68:7b:f2:ca:18:33:8c:88:8a:6c:
96:66:5a:93:25:9e:96:13:60:5b:6c:09:51:4c:ca:
3b:db:74:f6:08:e3:7d:31:75:bf:ba:5d:f5:18:85:
de:a6:8c:14:a8:07:54:54:01:ec:4d:2d:82:f9:39:
75:41:5c:92:5d:d5:5d:cb:99:d5:b8:bb:a6:f7:d1:
f3:38:01:a4:0a:5e:59:93:21:8e:aa:95:15:eb:62:
d3:c8:1b:2e:91:d2:c2:9d:b5:08:08:3e:c4:bb:28:
d1:7f:db:7b:ae:b5:74:f7:f6:39:08:f2:8d:8f:46:
9c:4e:c4:d2:7f:6c:1f:ba:a8:b3:a1:43:00:52:19:
b8:c6:0c:5f:8d:bc:dc:64:64:de:9f:f3:63:f4:a6:
9b:d8:0d:6e:b3:42:67:d3:78:48:46:43:92:83:fe:
00:5b:51:f4:aa:6e:c2:39:7a:ae:82:11:b2:c3:3c:
69:45:d4:21:be:07:dd:4e:b4:f9:a1:94:0d:cd:b6:
f9:23:bb:29:78:e0:a8:00:a9:68:ab:84:5f:72:d5:
14:49:0c:21:7d:d6:67:e4:83:a4:0b:b3:a8:e2:e7:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:B2:8B:C6:04:DB:42:99:76:C2:45:F2:39:87:AE:F8:D7:3D:09
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:05:6b:4f:a3:5d:98:ad:f7:84:d5:fb:24:7f:45:84:89:
2e:3d:2d:9e:c0:4d:34:e3:cc:d5:db:c8:4f:e9:96:15:79:5f:
90:79:07:6c:fb:e7:23:3a:6b:b1:66:a7:ea:85:09:76:51:76:
bd:64:2f:f1:48:fd:38:3c:d0:70:bf:6b:59:54:9b:26:8e:2f:
cf:16:bb:d9:af:ca:06:fd:a1:83:4e:50:25:c0:48:d0:11:56:
f5:56:b9:b4:5a:0d:ac:8e:4c:0b:98:3e:d2:fa:de:40:5f:ce:
18:99:f9:fa:ad:c9:96:61:36:5c:ba:82:1c:15:2b:15:bd:97:
b9:f9:7e:49:8e:d4:ef:f0:de:2d:2f:4b:21:15:c8:62:c8:44:
af:21:fe:ce:fd:64:34:e0:f2:3e:e5:40:a3:b2:b9:64:5a:64:
59:91:dc:ca:fd:59:e9:e5:38:f5:85:f5:9c:e4:6f:02:4b:67:
eb:59:f8:9a:a3:cc:7d:0f:ee:18:bf:ae:6b:ba:35:fd:5b:a0:
7b:71:b3:a8:45:75:98:fd:e0:54:80:cf:a9:fe:de:08:8f:35:
12:66:89:d3:d0:e6:e9:2a:9a:8d:eb:10:ef:1c:c2:42:74:f1:
c8:d2:bc:5e:09:4d:aa:ca:4b:55:e1:90:53:e3:19:85:a7:6b:
da:5c:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:35 2025 by rpki-client