Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: zlzTjU50JHCC/D4VHRQy6NA+3mSvpQN1Jqunh1apHzQ=
Subject key identifier: C7:1B:DE:E4:90:2F:50:84:DB:2C:CD:04:A3:2E:00:FD:4B:CA:45:77
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 019A2364FD78E93A97948CEC6B5903625A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 02:00:12 +0000
Manifest this update: Mon 27 Oct 2025 02:00:12 +0000
Manifest next update: Tue 28 Oct 2025 02:00:12 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: lFJn2EPTAOGX0FtfKQOf1bA2GuNE0wwvhaH3HX1UwPk=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:64:fd:78:e9:3a:97:94:8c:ec:6b:59:03:62:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Oct 27 02:00:12 2025 GMT
Not After : Oct 28 02:00:12 2025 GMT
Subject: CN=c71bdee4902f5084db2ccd04a32e00fd4bca4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:4e:5f:85:e4:7d:50:ba:75:49:60:1d:6b:
99:8c:c5:cf:ae:c4:df:31:80:eb:e0:4a:8c:de:05:
a9:3a:10:61:06:28:aa:d3:73:45:52:90:a6:d9:0f:
5f:19:07:2f:58:36:d2:0c:c2:56:e3:f3:6c:4f:ca:
fa:35:df:e7:0d:0f:1e:51:dd:38:89:b9:d2:df:10:
0f:65:59:c8:20:8a:13:a9:79:73:10:59:0a:58:65:
47:99:46:95:86:59:e4:b8:ac:bb:92:75:c1:c2:b1:
7b:a8:32:30:eb:86:d1:bc:53:54:6f:5a:b1:f5:13:
bb:41:19:14:2f:0e:a7:3f:84:43:56:e8:a0:ae:4c:
b2:ed:3a:8f:b3:9b:e8:12:16:9c:89:77:78:8f:10:
f6:ab:01:98:f0:da:98:7a:d4:82:0f:1e:8c:d5:05:
98:b4:16:d5:92:5b:fb:d8:0c:bf:19:93:24:f7:7a:
0b:09:57:f3:c6:59:0c:40:c1:4c:9d:75:28:33:97:
f6:09:d5:6c:97:32:1e:66:80:a8:af:ce:3a:09:ba:
44:13:6c:12:a1:ee:cf:b5:23:af:f0:19:0b:01:97:
1b:c9:4c:ee:1b:bf:46:1e:ec:34:fa:3f:64:a7:d7:
10:9b:69:0a:1b:f4:b6:a6:b6:bf:0e:8d:b1:dd:70:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:DE:E4:90:2F:50:84:DB:2C:CD:04:A3:2E:00:FD:4B:CA:45:77
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:e8:85:48:01:65:bc:0c:d0:90:53:71:87:f5:5d:e7:52:
52:2a:b2:90:3c:e0:da:5d:f0:39:1e:5a:ed:a2:80:85:64:d4:
24:08:b7:95:2a:c6:e5:d5:a5:df:53:a0:f1:3a:d9:c7:97:4f:
15:d4:4f:4b:5c:ff:3f:f3:96:03:3c:40:48:76:81:4a:57:20:
2e:1c:ea:86:a2:62:1d:1a:55:72:d1:41:37:12:18:48:d4:b8:
a3:6c:36:18:5a:9c:ae:68:44:71:b2:b1:93:66:ac:8f:b9:48:
44:36:46:58:ce:d4:f9:1b:36:07:d3:c8:32:6a:b7:dc:35:c5:
33:d9:ef:2c:c5:14:4f:d2:d4:23:a1:23:e4:a4:ff:29:77:a1:
68:28:07:c7:ea:b2:1c:0d:91:0c:c9:f6:a8:99:49:29:67:53:
ca:8f:e8:3f:ac:b8:e0:1a:2e:b4:98:b6:8d:7d:8d:54:62:b9:
d4:8f:4d:83:2b:bf:ea:96:18:c8:99:a4:93:9c:29:7e:de:1d:
35:17:36:7c:d5:82:e3:cb:bf:d2:db:68:5b:26:a8:56:55:73:
ac:b2:67:38:95:3a:b6:59:db:83:82:b5:6a:3f:68:22:77:7c:
8d:88:4d:03:96:a2:16:c3:06:ef:05:01:7b:64:31:d2:da:c6:
a9:26:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:14 2025 by rpki-client