Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: F5UQhU522P7jQwAjqdBYBgdPuBcqedHug5E7foylklw=
Subject key identifier: B9:EC:04:04:6C:91:AC:AA:C5:0D:56:06:B7:E9:0E:97:DD:60:E3:30
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0199C4FBAE6F06C29D8E0FA86477C11207FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 18:00:52 +0000
Manifest this update: Wed 08 Oct 2025 18:00:52 +0000
Manifest next update: Thu 09 Oct 2025 18:00:52 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: ULH3LAqMjU2bWwwB7nSPHJyNSCAORM1fREh0LIwFfhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:ae:6f:06:c2:9d:8e:0f:a8:64:77:c1:12:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Oct 8 18:00:52 2025 GMT
Not After : Oct 9 18:00:52 2025 GMT
Subject: CN=b9ec04046c91acaac50d5606b7e90e97dd60e330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:b3:d2:17:cb:54:38:b4:39:8b:77:a1:7d:
f7:fb:15:e8:2d:b5:88:df:cc:d1:44:d0:a5:05:ab:
72:10:65:47:aa:08:cb:04:b0:66:57:45:33:dd:4e:
82:16:e1:85:d4:46:0d:61:ac:56:9c:d9:ea:0d:b9:
82:7b:ce:07:94:1f:2c:3b:63:1c:7a:9c:cc:00:a3:
e7:0c:af:e7:73:a2:b0:3e:b0:fa:a0:12:4d:eb:79:
e3:b5:35:38:9b:5d:3e:7a:52:df:a5:86:2d:e0:74:
47:55:0a:dc:da:bb:31:51:34:07:ad:51:8e:b0:b7:
2b:50:8f:29:c5:9c:88:78:fa:cb:05:2e:e5:d1:ad:
37:f1:3d:5c:84:18:34:7c:63:20:f2:5f:94:a8:07:
a3:0b:9e:30:f7:1d:0d:0d:9b:d8:f6:20:55:b0:cd:
df:65:af:90:35:b7:38:fc:61:a6:23:04:11:2c:e8:
c5:5a:b4:42:e1:6d:12:e5:b3:3d:19:64:26:40:cf:
2e:e6:ef:0f:8e:98:88:01:9f:9a:48:e3:90:05:33:
4f:0e:f0:34:54:71:fc:9b:09:cd:55:51:ec:66:b4:
8f:bc:19:f3:3d:a8:e4:72:4f:0d:2e:84:69:03:90:
1d:a3:5d:25:e4:16:11:d0:7a:de:ef:9c:4e:9b:66:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:04:04:6C:91:AC:AA:C5:0D:56:06:B7:E9:0E:97:DD:60:E3:30
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:2b:47:f9:11:b6:77:06:e6:19:6c:52:52:f2:86:ba:b5:
5d:bb:29:3c:96:6d:ba:d7:04:33:ce:bf:d9:64:6d:b5:a4:28:
fb:be:dc:73:ef:11:27:8e:56:c4:bf:b0:03:df:87:5b:3b:16:
a1:7e:30:ed:e8:5e:09:fb:91:9d:36:a1:85:d5:1e:a1:94:f8:
79:e7:a2:ea:ac:bb:d9:fc:90:87:93:21:45:d0:b9:08:bb:5f:
84:db:33:a6:d1:db:f0:84:b6:1b:3a:b9:94:b4:4f:ca:b6:38:
33:5e:57:77:59:b1:21:4b:18:61:cc:36:0b:d5:ed:b1:12:43:
df:3c:69:07:9d:1a:9e:d4:66:89:63:fa:4b:40:09:d3:e7:6c:
79:5b:f4:b1:66:d5:1e:96:24:21:de:65:44:89:8c:7a:a6:58:
6e:ce:95:81:a3:98:2c:2c:8e:df:bb:ac:c9:b3:b2:d9:e0:0c:
19:bd:5c:54:53:55:90:9d:3f:53:d6:19:24:50:0c:59:3b:c6:
b1:a5:e1:17:63:ac:7b:e4:e8:99:bb:bc:d6:5a:cf:71:44:98:
30:26:44:27:ec:c1:d7:f1:a5:17:ff:d6:0c:0a:a1:95:82:b3:
8b:f3:51:6b:cf:df:7a:10:eb:24:17:bf:57:08:5d:9e:6c:fd:
72:3c:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:24:49 2025 by rpki-client