Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: zcJX8/+YgcDiHdDBJt4+33hW6fC86OT0XLo4SxR2IAw=
Subject key identifier: 66:12:46:63:CA:CE:FE:9E:38:7C:D2:42:A9:1B:EE:19:C6:D4:EE:54
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019A2BC3C9CAE3327DF0101C432BABF0846E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 17:00:42 +0000
Manifest this update: Tue 28 Oct 2025 17:00:42 +0000
Manifest next update: Wed 29 Oct 2025 17:00:42 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: zDuqIXCJXuqQt7GPFwVms7sM3pwDP+qNDLOe5fabM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:c9:ca:e3:32:7d:f0:10:1c:43:2b:ab:f0:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Oct 28 17:00:42 2025 GMT
Not After : Oct 29 17:00:42 2025 GMT
Subject: CN=66124663cacefe9e387cd242a91bee19c6d4ee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:e8:f8:b9:15:0b:10:f4:f6:8f:a5:fe:c2:
cd:b4:db:5b:c5:2e:eb:29:5c:1f:29:cf:89:d9:6f:
4e:2f:11:41:c5:01:dc:db:dc:1a:66:25:78:fa:d1:
35:d4:ef:78:52:9b:9d:03:42:13:91:d1:f7:cb:ea:
f1:1f:1d:08:a2:39:82:75:50:72:70:30:1a:52:3a:
f9:96:27:d7:13:ba:3f:14:af:6d:65:66:ee:27:df:
13:75:f8:c3:0f:36:76:fa:cf:9d:0c:df:70:0e:c2:
56:44:b6:60:fe:a4:22:bf:2e:9f:4a:1c:a5:14:fd:
3d:82:b4:b5:64:a3:94:17:28:3e:a2:3e:3b:5b:f7:
ca:ad:66:58:55:af:0e:22:76:80:be:d9:f5:c1:0f:
1a:fb:98:fb:3a:f3:46:d4:62:25:20:bd:61:00:0a:
8c:cf:54:35:b0:01:e7:4d:63:7d:79:66:ca:19:e5:
17:2f:e6:a7:ec:e9:77:66:03:45:2b:bd:4d:85:33:
27:5e:48:9f:43:e5:e8:fa:b0:24:50:03:2c:15:1f:
b9:03:df:0c:fa:76:e0:69:24:6a:c6:44:fc:07:4b:
9b:67:30:de:c8:62:31:75:3f:63:8a:9e:74:d5:4e:
0c:b9:9f:77:e3:ed:b4:72:66:e8:a0:79:76:0d:5c:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:12:46:63:CA:CE:FE:9E:38:7C:D2:42:A9:1B:EE:19:C6:D4:EE:54
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:3c:ef:fb:aa:4b:67:91:c3:60:80:8b:7e:0b:bb:6b:ed:
08:a3:bd:7c:29:d0:c7:0e:8a:36:c3:6b:db:cf:a5:0e:2d:b8:
db:6e:b0:d6:49:86:61:51:12:28:46:bb:29:74:32:d6:51:d6:
fb:b3:11:11:4a:93:54:b7:39:54:1c:3e:af:39:20:66:e2:15:
2e:92:87:dc:50:a1:92:cf:25:1d:2d:27:20:a8:73:56:76:48:
d8:a5:e6:f3:ca:ab:0b:d0:14:ce:81:1f:02:b7:c6:55:ea:05:
3e:9e:cb:5d:e8:38:6c:51:cb:39:ce:b3:45:b0:fd:4f:2e:bc:
d1:ee:7c:7a:f9:57:53:ad:aa:87:59:a5:c5:56:77:eb:70:25:
86:fe:6d:0f:fa:03:b5:b9:2b:d9:51:8f:35:ae:23:30:93:5a:
8b:9f:a3:a3:00:67:b3:72:9f:e5:1e:6e:2e:eb:6f:e5:40:dc:
ba:df:79:0d:58:49:1a:5d:e7:d4:b6:68:9c:b4:7d:f3:a6:ff:
82:38:2b:ef:85:13:52:6e:42:f1:57:57:9d:30:08:8e:15:21:
a3:9d:34:66:26:e9:0d:29:47:1b:8f:58:8b:06:a5:5d:9d:a9:
aa:d9:2a:d0:b3:42:b2:6e:ba:db:c3:69:0d:3a:37:70:e1:52:
d1:72:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:30:23 2025 by rpki-client