Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: Zl7EkCVzvlJlykHwn4fCa1Y/wtKKO2wI0OdO9kjKmuo=
Subject key identifier: F1:74:09:88:0E:FD:9B:C5:04:ED:CB:6A:47:CA:9A:B6:C1:65:E1:85
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019A1AD0B3F008B838424DFA1299C483B36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 16F0
Signing time: Sat 25 Oct 2025 10:01:16 +0000
Manifest this update: Sat 25 Oct 2025 10:01:16 +0000
Manifest next update: Sun 26 Oct 2025 10:01:16 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 8gwzh632BS7oLzZ37dc/SCFtYqf581uy67TOnG+khxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:b3:f0:08:b8:38:42:4d:fa:12:99:c4:83:b3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Oct 25 10:01:16 2025 GMT
Not After : Oct 26 10:01:16 2025 GMT
Subject: CN=f17409880efd9bc504edcb6a47ca9ab6c165e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:a4:1b:32:b4:1c:f1:19:4a:02:f0:f7:98:
dd:03:eb:04:c1:3b:44:b8:e8:71:d4:a9:0c:98:cb:
e9:8a:0b:0f:dd:6b:75:a2:78:0d:8a:23:90:13:de:
b6:2a:ed:9f:c2:c3:e6:8e:b4:d4:9a:00:c2:a2:5b:
83:b4:9f:ba:06:e8:84:cc:c0:8a:29:7d:7f:dc:56:
6f:34:ed:34:37:d1:c4:01:0f:50:85:76:50:46:01:
96:69:d7:fd:fd:9f:8a:39:4d:49:e1:06:f4:58:59:
61:ad:08:eb:05:65:36:27:e4:14:a8:b0:25:2d:ee:
47:6c:2d:54:67:34:64:4f:88:28:6e:7e:d0:66:4d:
fd:95:38:a2:1d:63:5e:f3:2c:b7:31:60:50:70:53:
f8:fd:9d:3d:52:67:9a:e8:8c:a7:f5:d2:c5:f6:29:
e8:77:11:79:96:f5:21:e0:92:84:f7:96:9d:28:c6:
3c:22:ef:2c:fd:8b:11:4b:8e:a6:62:c8:fc:7e:f9:
7d:80:3f:e5:10:16:dd:93:11:88:38:0b:fe:9a:2b:
20:2c:ba:aa:7f:97:d4:c7:08:ec:0c:2e:5a:ab:c7:
3a:ab:4e:95:c8:44:33:bb:95:c2:30:6f:19:ce:2d:
0d:f8:93:66:b9:ac:36:08:84:6b:8f:7b:bd:3e:74:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:09:88:0E:FD:9B:C5:04:ED:CB:6A:47:CA:9A:B6:C1:65:E1:85
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:fd:ec:4c:36:fb:dc:5e:2a:b0:fd:21:fd:fc:3c:3b:10:
05:38:1c:ed:25:e1:a1:6b:5a:8b:12:13:99:d7:ef:23:f3:d7:
cb:b9:bb:9d:5b:93:d1:c5:87:76:5f:7f:56:89:70:f5:17:dc:
79:49:58:b4:96:ad:cf:7c:44:62:02:15:7e:f3:23:b4:fe:a3:
ca:61:83:e7:54:b4:7f:3b:79:18:b4:d3:62:2b:29:43:b9:4a:
d6:ca:94:11:47:d7:9e:b3:50:38:60:b8:af:08:2d:36:c9:5a:
61:2e:c9:27:b9:40:b4:6c:6b:5e:b0:41:ef:23:d3:59:34:22:
a6:45:f8:3b:3c:d9:f1:1c:32:08:f2:5b:59:5d:b8:5e:e9:48:
16:5d:5c:59:90:5b:77:8c:cc:37:d8:e4:4d:5d:92:4c:13:22:
9a:12:fc:6a:94:df:13:0e:ac:cc:b6:dd:a5:e5:b5:c2:47:bc:
99:1a:3f:9f:4e:e2:3d:38:90:dc:a4:39:79:40:3e:62:16:c1:
2e:58:14:82:04:6b:8f:8a:dd:89:90:71:88:f4:12:26:93:99:
e3:af:a6:5c:3a:f2:80:3f:fb:7d:e1:29:e1:09:09:29:bc:35:
ed:8b:c1:29:fe:8b:6f:6d:d4:86:9f:c0:08:d7:35:5f:74:98:
1a:09:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:35 2025 by rpki-client