Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: PS2jwecirEJsoZHZKrdqd6ix5EKPqzyTqoD4VK6pXHw=
Subject key identifier: CB:60:B6:95:69:96:29:D3:1C:19:71:DB:4C:90:48:0E:0D:24:B6:27
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019A1F516CA656D55494EDDF873CDA58558A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 07:00:21 +0000
Manifest this update: Sun 26 Oct 2025 07:00:21 +0000
Manifest next update: Mon 27 Oct 2025 07:00:21 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: gsGWwtw4xyoE3oeub8pjKj69HGMbKlolPrMoYXhoRoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:6c:a6:56:d5:54:94:ed:df:87:3c:da:58:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Oct 26 07:00:21 2025 GMT
Not After : Oct 27 07:00:21 2025 GMT
Subject: CN=cb60b695699629d31c1971db4c90480e0d24b627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:82:9a:ff:6b:d5:ee:74:d8:b0:00:db:83:
88:ca:3a:0a:e1:9a:52:3d:dd:c5:52:c5:67:6c:e5:
c2:36:21:ac:ff:f1:8e:ff:67:57:5f:8b:5d:12:9a:
12:3e:bb:67:74:be:fc:ef:cd:58:f7:56:23:98:38:
c8:08:f2:77:26:16:13:a3:65:44:ca:11:b9:0b:de:
7b:4d:e8:02:ba:8b:46:3b:21:9e:13:5d:f3:23:e9:
73:ed:2a:f7:42:20:3a:f9:66:1d:72:94:91:2d:4f:
7d:4e:69:da:d4:89:9e:e0:a3:cd:a6:28:43:c5:74:
89:a1:96:0c:99:29:65:16:de:56:aa:34:97:6b:9d:
d9:99:d9:04:92:8b:ee:f1:a0:9d:94:9b:60:e8:fe:
bf:42:d6:95:a9:89:20:2a:17:f6:00:13:65:42:44:
80:92:30:e4:63:4d:e5:55:9b:12:8b:73:67:2c:0e:
bd:8b:27:7b:c2:73:6c:3f:83:b3:ca:16:eb:5f:40:
30:3e:e4:75:a9:93:63:fd:f3:dc:70:89:92:f9:68:
b5:7b:a2:6a:a5:9d:96:b7:08:98:7d:06:bf:5d:af:
18:88:36:9d:2c:ac:dc:84:c2:3f:c9:76:80:0b:7f:
d6:95:a5:ab:0e:05:a4:37:b1:63:88:e8:3f:e9:4a:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:B6:95:69:96:29:D3:1C:19:71:DB:4C:90:48:0E:0D:24:B6:27
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:50:5f:c4:c6:8e:bc:6f:91:5a:36:eb:c5:5c:0d:15:4a:
18:81:7c:3e:7a:a6:a3:ba:8c:78:30:7c:30:1c:20:d0:be:b0:
7b:2d:ba:fb:cd:5b:97:8f:8a:4b:d9:8b:29:5e:c1:81:7d:a4:
91:17:ce:24:89:eb:3e:79:dd:10:7a:f1:96:db:6a:19:3d:85:
75:e3:12:e6:b9:a5:25:ed:8c:24:8d:9e:d1:97:b7:41:0f:b0:
b3:ee:da:d7:db:dd:2e:df:32:83:ba:5a:19:c9:8a:09:93:4b:
66:1b:4a:13:05:bd:b9:6a:63:67:e5:49:d8:72:a1:b7:ef:f3:
6e:06:10:d1:fe:14:c4:c6:46:77:ea:dc:c9:e9:5f:68:f7:e6:
7d:78:91:0d:9c:ec:7e:4d:49:7b:52:c3:43:82:f4:0d:aa:fc:
33:3c:70:49:9e:51:97:e4:55:5b:84:13:59:32:85:32:0d:fb:
fa:51:2a:db:b9:05:24:89:f7:4e:e0:64:8b:8d:6f:c0:4a:a2:
3b:a3:f3:fb:54:c0:6c:19:47:70:b7:cd:44:9f:f4:b5:93:8b:
a3:73:87:c8:b6:eb:20:ff:24:28:99:a6:12:61:84:77:f3:ea:
ca:de:8a:ba:d3:77:46:2d:7d:62:fe:4b:65:c9:56:0f:60:33:
c0:fd:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:46:34 2025 by rpki-client