Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: LxqdGJUZF6rg3B3PlTVBnLhkQicoQUwbaJeM2aRMJ90=
Subject key identifier: A5:46:88:25:A6:EB:FB:55:FE:9F:D1:5C:12:54:7E:4C:DB:47:A6:8F
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 0199FC58BE449A6E5055968C92B874890FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: UI6FYLkUyaVGwXrhM+zUQBFPScJG5QScWihUFMa3R2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:be:44:9a:6e:50:55:96:8c:92:b8:74:89:0f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=a5468825a6ebfb55fe9fd15c12547e4cdb47a68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:b2:7f:3d:4a:6c:e7:f3:66:83:ce:5a:72:
b8:6c:71:a6:4e:18:77:47:75:bc:8a:84:4c:27:b2:
d1:7d:25:3f:4f:39:4d:64:b7:9e:7a:75:a0:44:f5:
1f:86:20:eb:ec:82:ab:cf:6c:f9:9c:be:bd:eb:e8:
a0:7b:06:2a:c2:08:39:55:61:e9:84:eb:4c:f8:2c:
45:bf:c1:71:51:30:d2:27:c8:1a:f4:84:6d:79:51:
8e:50:2c:7b:aa:3d:cd:e3:f6:55:63:65:41:86:3b:
8e:1c:96:21:60:4c:6b:81:da:a1:43:68:02:64:65:
1c:fa:d2:6e:db:6e:f9:16:e4:d0:34:a9:63:ec:14:
ff:04:0a:9e:1f:a8:43:e7:49:8d:5d:14:70:16:19:
31:7e:ae:21:74:17:a3:9c:ef:7a:fc:30:03:02:39:
64:f0:93:88:06:46:eb:5a:6e:38:9e:dc:52:0b:0d:
75:7d:aa:5b:77:c2:7d:50:41:e4:ad:98:f4:11:86:
e9:26:f8:d3:66:91:57:7f:b4:b0:2b:0e:19:58:0e:
bc:4f:cb:22:c7:bc:6e:3f:be:e9:3d:94:10:b6:b1:
f8:8b:d6:38:e0:42:2c:4b:45:46:07:7b:b8:4d:ce:
a9:d9:57:59:bb:76:a1:1f:f0:88:61:58:b1:6b:c2:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:88:25:A6:EB:FB:55:FE:9F:D1:5C:12:54:7E:4C:DB:47:A6:8F
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:de:21:76:e5:75:9a:ce:1b:22:9a:17:e5:e7:fe:73:cf:
49:85:c2:97:dc:ba:3a:6c:2b:8c:ac:3f:1b:91:ab:56:47:47:
47:b0:c3:5d:ac:58:9d:12:a9:49:8d:9a:77:88:a3:19:32:0b:
c7:30:5b:ac:12:0c:01:c5:3b:fa:64:ac:4a:7f:0b:88:3c:e5:
54:ae:4a:e4:57:69:37:9e:06:73:15:ec:b0:e6:b7:81:7b:46:
68:61:7e:5f:b3:c0:99:f8:12:86:b5:72:47:ae:8f:12:57:22:
0a:da:bb:a5:b3:bb:17:15:10:dd:24:f9:bc:a1:60:2c:51:99:
24:41:46:ca:91:8f:69:5f:ec:2f:79:0a:91:71:8d:f2:a1:63:
eb:04:f9:38:b6:44:cb:e0:74:53:3f:0f:5a:db:b6:73:76:db:
f6:36:fd:6a:5b:39:f0:f5:9a:c2:c3:df:c5:f7:f6:2a:02:c8:
00:2e:e8:8b:6e:18:31:4b:9c:64:72:74:bb:77:89:57:1b:e4:
4e:76:1b:1b:11:66:ca:b7:b9:4c:02:24:14:5d:58:4d:a8:35:
21:e6:33:26:ce:40:f9:72:6b:f7:e3:17:6b:09:69:85:c8:89:
49:d1:d3:3b:17:14:ed:8e:05:11:c8:4a:b7:3e:fa:c0:58:61:
74:8e:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:01 2025 by rpki-client