Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: xBv031mgeEzmLsDmqjDMLZ4xwVg886i/To7Y5qABBYY=
Subject key identifier: 31:28:68:DB:6E:7D:F8:49:2C:A3:9D:FC:32:2D:FB:C0:C4:EB:9F:95
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 0199FC8FA88852131CFFDDE75F426275BDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: DH+6M+sR9T3H/g84w2NjF6k2wghld7DejRvK9yC7EQU=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a8:88:52:13:1c:ff:dd:e7:5f:42:62:75:bd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=312868db6e7df8492ca39dfc322dfbc0c4eb9f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:bb:8a:bf:3b:74:3c:be:1b:b1:1b:b9:fb:
d6:0f:8e:29:dd:55:7b:7f:65:83:00:70:09:a8:58:
61:5e:91:0a:d9:12:9a:15:a6:84:50:13:5b:64:5c:
6b:a8:70:ce:24:eb:cc:a8:c8:96:cf:f6:ac:07:fa:
bf:f9:fd:79:04:7d:43:c2:86:2d:6e:43:c3:d2:45:
b3:96:e3:0e:64:7f:1b:ff:42:30:d5:cb:3c:63:42:
ee:e2:b3:b8:01:74:66:bc:76:7d:7d:6f:cf:44:1c:
6a:de:cc:f2:fb:cc:ef:c3:f2:cd:58:4c:07:1c:af:
72:09:59:84:b3:8e:e0:c5:72:b2:50:32:30:f9:07:
e0:01:72:8d:09:35:eb:db:f8:4b:c8:80:55:30:a5:
7f:7a:9e:5f:f8:d5:bb:26:78:a4:18:a4:0e:49:67:
e3:95:de:1a:e7:77:d9:10:1d:a7:93:a6:7d:5a:ee:
e0:ee:97:bd:99:ce:4d:39:6b:a5:e2:c3:2f:75:fd:
1e:72:88:fe:9e:aa:b1:0f:d4:d5:3e:bc:00:b8:d5:
e0:24:d2:e1:72:b0:83:05:c5:f5:23:29:00:94:0c:
1f:a7:d7:0b:84:f5:d6:fa:06:95:36:18:ae:bc:21:
e5:61:ad:45:f1:56:a6:9b:9d:ed:98:39:1b:ca:1f:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:68:DB:6E:7D:F8:49:2C:A3:9D:FC:32:2D:FB:C0:C4:EB:9F:95
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:14:78:1c:a6:27:66:c5:c8:a6:99:03:2d:c8:59:3a:b1:
26:72:8b:bd:1b:c2:7a:9b:21:02:f1:12:8b:02:5c:b0:b7:2b:
9c:16:18:bb:de:76:95:a9:d9:ad:5b:d1:c8:19:1c:3f:b7:18:
ae:96:8f:14:31:49:ff:bf:52:ca:df:25:14:20:9b:cb:15:12:
59:1c:20:2f:0d:4d:c4:58:12:b3:ec:29:e1:73:51:8f:30:b3:
d0:35:8e:35:92:d6:40:f2:24:01:2d:19:6c:94:4c:24:ac:db:
ac:60:58:b9:7a:dc:cd:f5:ab:0a:65:40:04:ce:f9:c6:54:5e:
98:e0:b1:52:a2:3e:35:01:9c:b8:77:50:14:2e:c3:3d:93:f3:
ab:a5:5f:7e:43:a2:2b:0d:58:da:6a:f1:65:e5:83:38:fa:e7:
5e:1d:23:7e:ba:41:0a:85:46:51:6c:e7:af:cc:fb:b9:00:99:
45:b7:ca:06:4a:a7:0c:90:2b:e1:a2:55:c9:ab:b0:f9:3d:ed:
0f:e0:82:08:02:03:83:d3:5c:80:f9:fc:40:4e:9a:ae:e4:5d:
fc:76:a8:6e:d8:4a:59:23:ed:b6:d0:e9:26:3a:57:5d:36:1f:
fe:8c:a0:34:49:8e:d7:4a:b4:e2:7b:8b:99:aa:40:2d:54:91:
b8:a0:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:51 2025 by rpki-client