Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: fL8MvvZmvTZQX9ztmo4/ipcRrgb7eFdvgzsSzUQo76c=
Subject key identifier: D2:B4:01:CA:5C:73:40:CA:54:64:91:BC:40:65:FE:8C:4C:D8:2A:22
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0199FB457D11F7D68C521BE013DA875DB6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:00:59 +0000
Manifest this update: Sun 19 Oct 2025 07:00:59 +0000
Manifest next update: Mon 20 Oct 2025 07:00:59 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: 4ARwzWXsqRC0GHE0Gyb+2YvNNYdKn0cO2cGFAO0OH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:7d:11:f7:d6:8c:52:1b:e0:13:da:87:5d:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Oct 19 07:00:59 2025 GMT
Not After : Oct 20 07:00:59 2025 GMT
Subject: CN=d2b401ca5c7340ca546491bc4065fe8c4cd82a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:88:36:ba:80:53:8c:2d:98:0b:31:c1:82:
f6:b4:fc:91:99:67:65:0d:61:fb:9e:3e:ca:b7:d8:
b0:71:e1:9d:c1:20:55:3d:81:63:e3:73:6c:4d:eb:
6d:46:ab:49:de:e7:60:0f:19:f8:55:dd:1e:38:e4:
6c:30:c4:c9:d3:3b:a9:79:4a:4f:1a:4f:9b:4f:5f:
f5:46:1c:21:fd:cc:8e:94:8f:fe:4e:86:eb:b1:df:
94:22:b2:ce:d2:6c:62:8b:3d:ec:67:13:98:98:d8:
2c:df:47:b7:a8:66:19:4d:e0:d6:52:4c:a8:b9:96:
db:2e:79:76:a7:b8:16:ad:61:7e:b9:41:96:68:bc:
51:2a:1e:c0:27:50:26:48:bd:2b:2c:e0:2f:fd:3f:
12:e4:11:99:9b:42:88:1a:26:b5:e3:ca:cb:13:7b:
9c:fa:23:a4:80:e4:40:74:cc:f1:25:cb:70:4a:4b:
0e:4e:b6:35:4e:aa:77:55:b0:5e:db:93:0f:0b:66:
51:aa:09:ac:5d:ca:b9:56:bf:82:76:4c:d2:a6:f2:
1b:a9:f8:4f:12:f6:a3:8a:52:8d:fa:95:c7:01:7c:
12:bd:66:b1:02:54:8b:93:11:60:ff:de:90:d6:c1:
76:02:fc:e4:0c:fe:ff:b5:c5:68:a3:d9:58:d4:21:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:01:CA:5C:73:40:CA:54:64:91:BC:40:65:FE:8C:4C:D8:2A:22
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:40:a5:90:ce:c0:30:80:5a:48:ed:d0:ea:bc:78:fc:b7:19:
83:05:0c:00:3d:f8:0c:e3:03:84:13:1b:a7:f1:e8:0e:c1:fd:
dd:2d:b1:48:f7:74:e7:56:3e:db:1f:a7:8e:bb:39:34:7f:09:
ac:7d:9e:4c:24:3b:f5:e8:84:aa:fc:88:b4:b5:99:fb:86:e5:
46:d0:c3:63:39:21:ec:57:a2:27:2b:ce:44:ff:16:f5:ce:f9:
17:07:0a:e1:14:2c:a8:6e:eb:9b:fe:97:5d:5c:fb:06:ae:24:
fa:d6:d5:b1:60:69:39:3a:c6:16:1e:70:30:98:a2:40:05:48:
25:92:2f:2e:3b:de:f8:f8:51:07:32:58:e0:87:e4:0b:54:4f:
95:2c:4f:d4:14:ba:20:f7:48:29:5c:ed:ac:3c:de:72:24:9e:
76:0e:8f:92:ea:74:17:b5:67:b9:f8:4e:a5:33:4d:ad:70:cf:
27:f4:06:86:55:0d:0f:8b:9a:62:8d:6a:20:72:0b:52:e8:02:
d3:0b:55:10:f7:7d:74:5c:da:47:1f:be:25:29:36:f6:2c:e1:
01:8a:20:11:5a:52:29:45:44:7b:0c:94:da:6e:75:a6:22:ab:
52:78:79:85:6f:14:75:c0:de:4b:4c:a1:75:91:66:a5:fe:7a:
00:63:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:42 2025 by rpki-client