Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: 3Zi8E6CE1Vathk0j3nQWfEKrPMKn6crMlI1+7tVOmEM=
Subject key identifier: 17:D9:E9:D7:8F:1F:97:16:73:21:38:35:6D:0F:38:35:00:D0:D4:B8
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019A19BD02AC34719D4635E60056D03AF1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 16F0
Signing time: Sat 25 Oct 2025 05:00:08 +0000
Manifest this update: Sat 25 Oct 2025 05:00:08 +0000
Manifest next update: Sun 26 Oct 2025 05:00:08 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: v2GA8/iTLNTbMgEz4TJ3i2Jr3HMxIGY6Me/DDa+SebE=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:02:ac:34:71:9d:46:35:e6:00:56:d0:3a:f1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Oct 25 05:00:08 2025 GMT
Not After : Oct 26 05:00:08 2025 GMT
Subject: CN=17d9e9d78f1f9716732138356d0f383500d0d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:4a:4b:37:2a:99:09:59:98:e4:45:27:57:
c7:92:aa:c6:39:64:0e:16:82:e9:b5:08:d3:4c:53:
ce:09:95:47:de:43:bb:0c:77:ed:59:a3:21:e4:6e:
01:f0:cd:2c:c3:a3:f1:cd:da:14:c9:51:af:d6:c9:
1c:1b:4a:2d:28:8e:9f:d8:ce:09:4d:05:16:f6:98:
5e:29:1c:9a:34:cd:25:fb:34:d6:b7:c4:1c:0d:70:
90:92:0f:91:40:18:c4:75:96:7e:e7:c5:1e:c2:b6:
00:ae:cd:e6:91:0c:74:9e:28:ba:38:37:f6:d3:ee:
86:e5:f3:8d:36:ee:1b:f2:c2:3e:22:82:9e:79:84:
46:8d:45:b9:b1:26:f6:47:64:0a:14:99:04:b8:02:
d9:90:f8:56:b7:9f:c0:62:b0:ff:82:b2:b6:97:ad:
0f:5b:a1:7b:2f:9c:98:1f:50:f4:b1:67:f4:10:ad:
f7:fd:75:31:b9:94:27:c7:5d:d3:c6:56:7c:e0:d0:
65:9f:53:75:b9:1a:b5:cc:04:29:fb:d0:d3:42:fe:
cf:f9:e3:e5:5a:a7:45:e3:90:bc:15:af:21:49:f1:
00:e0:af:a7:99:ca:c5:cb:c9:d9:92:f1:15:8d:bf:
23:d3:81:c2:04:28:6e:76:f0:ec:ae:42:0b:58:67:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:E9:D7:8F:1F:97:16:73:21:38:35:6D:0F:38:35:00:D0:D4:B8
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:90:fa:8a:72:4b:ff:82:22:41:c0:d8:59:09:21:1f:9c:a0:
ed:48:8d:50:49:d6:05:91:7b:ed:6f:cf:86:ab:93:f7:3a:23:
68:b3:8d:5d:bc:de:67:4f:7d:4b:9d:8e:e8:b9:69:05:53:e3:
b4:25:86:9e:41:04:14:55:9a:84:42:8b:57:c9:61:1a:86:43:
a5:10:a5:99:f8:b3:04:f6:80:9b:5c:d9:04:4c:2e:00:58:f1:
92:68:c6:68:c4:09:15:78:3a:d8:49:85:2e:08:36:eb:f8:da:
52:06:36:88:83:58:d5:b0:c3:c7:16:06:05:0e:40:e1:29:4e:
89:fc:31:5b:e0:a1:8e:0e:3b:f7:b7:44:0a:8c:55:b7:f8:6b:
94:1a:96:82:c6:c8:82:cc:5e:34:41:f7:5b:58:c7:20:d0:b9:
d3:1a:66:84:43:5d:59:fe:31:81:a8:92:4a:af:84:20:fa:bd:
ec:5e:9d:4d:c3:0f:38:60:91:9e:65:be:4e:2a:e1:38:b0:d1:
5b:37:39:e9:e4:62:6c:c5:fc:fe:a4:10:79:f7:b7:48:cf:b5:
b5:8b:f3:a0:26:bd:6a:e8:23:2c:1c:9c:fb:d4:64:c9:ea:c6:
24:45:71:be:19:02:09:9c:79:66:ff:35:d9:e0:1c:18:5b:d4:
17:51:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:52:00 2025 by rpki-client