Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: qGOhxxMMt/Y+XgaalxNyihp1g+4OgFTeUp1JSSXPPQY=
Subject key identifier: AA:5A:D8:AE:3C:34:33:D6:A2:69:03:24:CA:FB:CF:06:4F:23:F2:0B
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 0199FDDA093110E756A8D586E9D8299DEBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: 1dbV7mcIaxiQaWQiugRIoSU5JFoLm+ulsNXVekT7G18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:09:31:10:e7:56:a8:d5:86:e9:d8:29:9d:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=aa5ad8ae3c3433d6a2690324cafbcf064f23f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:74:8f:83:63:52:b5:67:56:77:5c:4e:91:
a5:c1:fe:93:95:fc:d6:93:53:a5:b9:d8:04:a6:d7:
88:ba:d9:36:30:ef:4e:da:a0:0b:06:e4:12:dd:09:
53:58:2a:e8:ce:03:18:4f:cf:88:a6:1b:45:ea:7f:
d0:39:fc:62:37:c9:37:20:7b:5f:f3:b7:35:56:33:
4c:77:a8:80:68:2f:a9:b8:2a:e2:fc:43:08:cf:c9:
dd:eb:06:7e:f8:6e:35:c1:6d:b6:f1:3a:2e:0f:22:
95:4b:bc:eb:19:4d:3c:64:3c:07:7e:8f:1c:7a:76:
28:4a:13:97:12:f3:50:2c:9a:4c:fd:c7:ae:03:01:
b4:38:9b:36:9a:f6:2a:62:a4:22:f4:f6:1f:db:d6:
51:98:c7:17:1e:26:32:e7:59:d5:c2:fc:42:7c:a8:
bb:b0:79:52:6e:00:5b:40:ca:9e:cc:18:6b:2a:67:
29:44:76:e3:20:fa:58:00:cd:5e:80:0f:94:78:a9:
cd:43:78:0d:e1:bc:b5:1d:1e:22:19:df:9c:26:c8:
8e:be:e1:c7:54:1e:af:02:ab:c4:2c:9d:f4:e2:c4:
98:12:64:90:42:b5:da:2b:c1:8c:55:32:c2:f1:1f:
3f:15:cf:be:c6:3e:a5:89:a2:9a:4b:5a:4d:60:b6:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:D8:AE:3C:34:33:D6:A2:69:03:24:CA:FB:CF:06:4F:23:F2:0B
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:8c:0c:ff:f7:c6:6e:ee:21:25:11:9b:f8:b1:d2:48:09:
37:78:fe:af:24:0d:e5:5d:59:c4:b5:04:81:b1:6f:06:b3:fc:
8e:36:4c:5b:a8:ad:f6:4c:cc:1e:f8:02:27:f0:a3:e2:f3:30:
2c:08:c7:10:68:57:0c:5f:16:7d:f1:dd:6c:be:9c:64:77:3c:
44:d7:56:df:bd:c7:d9:18:53:95:de:d4:dc:4e:14:f0:c6:9a:
07:cd:04:9c:74:9c:84:2f:b9:54:24:5e:48:69:47:06:1b:4b:
80:59:5d:82:42:67:63:70:51:74:1e:4f:3a:db:72:d7:8c:60:
d3:51:87:74:d7:b4:c6:45:74:94:22:01:e9:3d:58:47:84:aa:
07:bd:f2:7b:de:79:89:6d:a9:be:18:de:70:28:78:27:de:cf:
d1:fb:3d:ef:34:ed:d6:a7:26:cb:1c:e1:66:4c:28:03:42:f8:
53:e6:c6:4a:06:35:24:ee:48:41:86:bc:e7:bf:d2:6f:ae:48:
d2:f8:b1:7b:e7:c0:4d:79:07:3e:b8:f6:54:c9:18:b1:46:9d:
46:4b:82:34:0f:40:89:28:f0:2b:04:25:d6:5b:6b:ae:b4:2e:
90:d5:a5:89:31:79:44:40:4d:2d:93:60:4c:c0:1e:e4:72:2f:
1f:40:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:22 2025 by rpki-client