Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: meKeuFIZEWTB2TW5Xc1A0Yoe+RQ3G/aQEcEjmaJW4sM=
Subject key identifier: E3:3A:ED:55:D6:D2:0A:9D:4A:D8:EF:F7:45:C0:9A:37:7A:D7:CA:6E
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019A0BCB00761987FFFA7A675DFB4206AEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 16EF
Signing time: Wed 22 Oct 2025 12:00:44 +0000
Manifest this update: Wed 22 Oct 2025 12:00:44 +0000
Manifest next update: Thu 23 Oct 2025 12:00:44 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: TkJkwemMuJU/0431LjYHbgArH7iYhQIw1gmdW298CdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:00:76:19:87:ff:fa:7a:67:5d:fb:42:06:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Oct 22 12:00:44 2025 GMT
Not After : Oct 23 12:00:44 2025 GMT
Subject: CN=e33aed55d6d20a9d4ad8eff745c09a377ad7ca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:a8:28:06:3a:63:f9:2a:b1:e4:88:e9:07:
4b:ed:cf:98:8d:9c:fd:11:c1:4a:eb:74:40:e4:92:
d4:41:9a:a8:d9:87:16:cd:86:e0:a6:3c:df:e8:5b:
b7:1c:66:e0:f3:70:f3:2b:b4:22:fd:e9:f7:e9:b0:
72:9c:cd:e2:2b:14:ee:48:7f:75:69:09:77:34:3c:
57:09:5d:7d:bd:7a:a7:48:e3:b8:5a:2c:40:dc:a9:
53:31:ea:fe:05:8c:88:9f:68:17:38:8e:52:91:2c:
b2:15:f0:c9:50:dc:0c:eb:98:08:3b:bd:ab:64:ef:
97:63:29:83:0f:88:f6:b4:58:18:04:03:10:73:44:
02:de:71:9d:f7:0b:42:9c:b9:f6:1f:bd:c7:7f:af:
d0:bf:5c:8e:47:ba:26:d5:8d:b1:41:5e:c3:83:2e:
e3:a8:a0:9c:68:0c:8f:d4:08:d2:98:67:bf:db:87:
2f:b7:35:90:5e:b6:5d:9d:06:d9:0c:82:4d:60:bb:
83:2c:92:98:d4:ce:05:f0:77:97:3a:76:88:79:a9:
bd:87:ae:f6:8a:f6:d9:35:5b:0d:0d:11:a8:1f:b2:
f5:17:ee:f2:11:b9:bf:16:c5:44:93:5f:09:a5:bc:
98:98:0b:d1:2c:a1:8f:87:98:8c:4f:ae:a6:cb:74:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:ED:55:D6:D2:0A:9D:4A:D8:EF:F7:45:C0:9A:37:7A:D7:CA:6E
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:79:e4:96:8e:fc:cc:fe:41:ee:b2:89:1c:20:b7:32:5c:99:
77:fa:df:3b:78:ea:c6:a2:57:2a:cf:31:81:1d:82:fc:21:7b:
79:05:82:9b:50:4c:25:ff:76:1f:e0:3d:27:99:a4:b6:cb:db:
33:0a:f3:a7:75:ad:b2:13:d6:14:f0:c8:25:eb:f3:44:c1:01:
6d:a9:85:78:93:1d:68:9d:72:3e:6d:4d:91:3e:56:c3:c3:79:
fc:5d:37:8d:31:6f:f5:2f:e3:d0:4b:0e:c9:a0:57:f6:6f:5b:
cc:68:a8:8d:87:fe:e9:c0:49:43:ba:74:42:f7:3e:3d:11:6a:
0e:92:f6:aa:ed:bb:9b:dc:d2:d6:03:72:fb:7a:82:f1:f0:8e:
29:f2:93:cb:fc:38:95:a5:e5:d1:fb:8a:3a:f6:f5:b4:50:48:
96:1e:3a:18:f7:6a:97:b6:91:d1:60:74:ac:c7:7a:1d:bc:45:
39:e6:53:ed:7d:40:f8:e7:89:a6:b9:8a:8f:cb:e5:25:38:31:
ac:c1:3a:b5:57:dc:85:c9:ea:18:7a:24:30:3c:34:87:d9:7e:
7f:ee:a4:ec:cf:15:d1:51:1f:fe:d0:25:86:da:a8:53:61:6a:
c7:dd:f7:ac:f0:35:06:cb:b6:48:7a:de:61:17:6c:6d:a9:74:
28:17:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:08:35 2025 by rpki-client