Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: q6GvCsNARt4ce4QnPMXtnvj9RXU1bVxdOWMfsDZ8eiY=
Subject key identifier: 2E:E9:E7:2E:D5:BC:24:3D:4D:BE:DA:10:84:C6:2E:3C:21:87:06:8C
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019A00DA0491D47788DEFDAEAED60212A3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 09:01:19 +0000
Manifest this update: Mon 20 Oct 2025 09:01:19 +0000
Manifest next update: Tue 21 Oct 2025 09:01:19 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 9i56m4/Gpvaf5N4FzLHl28/NhUmTC6Dtj3DlqgynoU8=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:04:91:d4:77:88:de:fd:ae:ae:d6:02:12:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Oct 20 09:01:19 2025 GMT
Not After : Oct 21 09:01:19 2025 GMT
Subject: CN=2ee9e72ed5bc243d4dbeda1084c62e3c2187068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:d0:b5:c5:24:da:8e:0e:bd:32:71:2a:ad:
38:1a:7c:df:65:04:91:54:bf:81:07:43:70:78:58:
96:1e:0e:f6:b6:41:a9:6c:46:29:c1:48:1e:fc:8a:
ac:51:16:cc:d8:ae:c4:7d:f0:c5:cf:79:8a:3b:e1:
b3:ae:5c:67:c8:63:62:db:e5:b8:8f:2a:c3:46:f9:
a1:8a:05:ec:8d:25:97:55:d0:e1:f6:a0:90:57:8a:
f4:8f:a8:32:c5:f8:2b:cb:fe:78:5e:29:e5:2d:09:
31:49:46:2f:f4:97:d6:e7:84:5f:eb:83:ee:4a:0b:
f3:ec:90:9b:b6:8c:c9:45:c0:5a:0a:d2:73:2c:95:
ea:69:90:78:9d:c6:c5:31:53:5f:0f:0a:46:d5:72:
80:71:12:df:62:60:6b:2d:0a:c6:ea:c4:b7:81:e1:
dd:1d:16:b1:11:d2:94:08:78:9b:78:d5:a0:af:6d:
07:f9:76:46:e2:13:3f:26:12:bd:91:bc:b4:23:4b:
27:ea:58:fa:28:a8:3c:98:21:6c:69:1b:36:b7:1e:
80:66:c4:8d:aa:f9:dd:d3:38:f3:a2:ce:94:e9:a0:
3a:ee:e2:46:4e:a1:eb:cc:58:fc:26:0b:a5:1e:b5:
ea:2b:cb:0c:b5:1b:b4:b6:f0:7a:8d:13:66:3f:97:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:E7:2E:D5:BC:24:3D:4D:BE:DA:10:84:C6:2E:3C:21:87:06:8C
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ab:35:d9:cb:e4:c8:d7:e3:4f:21:1b:8a:2f:52:aa:11:14:
aa:36:c2:ad:b4:1b:f8:04:bd:71:a9:00:76:42:04:41:d9:41:
dc:4f:19:16:b9:d3:ff:54:09:e2:77:de:ca:cb:eb:52:ad:b2:
e7:a1:4b:7e:7d:d3:91:eb:6e:fe:cb:ab:ef:3a:a0:2d:3e:3b:
84:c4:23:47:b1:42:37:f2:9a:a5:39:8e:f4:dc:a6:8e:41:ab:
58:31:29:73:07:d9:b3:63:d2:49:4f:54:a3:3c:65:a1:8f:44:
ae:5f:66:22:e3:e1:aa:69:31:b7:92:48:00:e0:fc:73:8b:31:
30:15:51:f2:79:00:71:ff:c0:78:e8:e6:40:fb:7d:1d:a9:be:
4d:41:8b:f7:9d:d2:86:f7:f3:1a:18:24:92:a8:01:7e:f4:14:
ee:8f:4e:4c:4f:49:bb:bd:89:9c:b4:37:36:6e:f6:d7:08:9e:
77:78:4a:68:98:d1:f1:c0:92:f8:9f:9f:1d:0b:51:b7:7e:37:
4b:41:f6:8c:83:ae:c1:e8:bb:0e:4d:ce:02:95:f2:b3:b2:fc:
3c:f9:e8:b4:99:a3:58:64:f3:dd:30:84:34:22:a2:50:2b:23:
df:36:9a:da:f7:17:a0:9f:03:ef:0e:f8:98:5e:83:a1:b2:31:
2a:93:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:08 2025 by rpki-client