Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: mQy/l53DeeX1WIC1Y1rfMHy7GOVvVbRFXo4LuqS2drI=
Subject key identifier: 15:7B:17:6E:4C:9A:A4:DA:A6:94:E8:45:F7:EE:D7:00:03:9C:D8:9B
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019A299E1F9ED2373941A18A5BCABE7D2535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 07:00:19 +0000
Manifest this update: Tue 28 Oct 2025 07:00:19 +0000
Manifest next update: Wed 29 Oct 2025 07:00:19 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: LEm3BX3ugd2YHZNFa1qGm9yGETPbuAAlA/yloP1VVNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:1f:9e:d2:37:39:41:a1:8a:5b:ca:be:7d:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Oct 28 07:00:19 2025 GMT
Not After : Oct 29 07:00:19 2025 GMT
Subject: CN=157b176e4c9aa4daa694e845f7eed700039cd89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:e7:27:39:7d:0f:8a:0a:32:13:40:37:64:
c6:a2:c2:12:2f:70:a8:ed:14:0e:53:86:a8:aa:4c:
62:e5:97:d4:1f:36:a7:17:7e:3c:10:5a:27:e0:05:
b0:2f:ac:b6:5f:51:94:95:e1:d9:10:91:10:0f:64:
b3:9d:36:67:40:ca:4c:03:e4:17:b6:de:36:60:bb:
cf:12:f1:4e:b4:ae:4c:23:30:0d:33:33:7b:8d:e5:
3e:b0:97:93:45:47:90:c1:6d:51:fa:21:5f:a5:05:
ca:9c:1e:bc:89:8d:a9:e4:3d:78:62:9f:6f:ff:62:
65:e0:41:e8:f3:b6:10:ce:86:b6:e3:14:77:fc:75:
d0:5c:16:1b:41:52:ae:f6:a6:8d:b3:a3:8c:6c:31:
4e:1f:33:5b:a6:8d:3e:f1:49:fc:82:c4:cb:0d:7e:
83:13:3c:73:31:f7:f7:ab:cd:50:9c:fe:6c:25:3d:
e5:96:c6:e2:9a:c2:07:9e:30:70:d4:a6:f6:57:29:
c1:18:59:bd:3c:52:e4:4c:70:dc:66:91:51:7c:4b:
49:7d:25:e7:97:9a:55:22:ad:f4:e7:15:fa:59:25:
30:5b:59:e6:78:65:50:3e:3f:ac:e6:da:ec:b3:c1:
7a:a4:b5:92:40:52:41:78:57:aa:11:b2:e8:ba:e3:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:17:6E:4C:9A:A4:DA:A6:94:E8:45:F7:EE:D7:00:03:9C:D8:9B
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b0:d4:c1:2d:84:30:51:00:0a:ab:4c:b0:5b:8d:ba:31:4c:
ee:1f:a2:e9:8e:46:f2:8a:02:f5:87:ee:03:ec:22:59:f1:b0:
a7:28:27:56:42:f6:32:bb:ca:15:19:63:cd:71:75:64:47:ca:
33:bd:cb:f6:68:25:2b:87:a6:1a:28:13:40:bf:23:5c:30:b9:
eb:b5:c4:c9:2a:99:f2:3a:4e:41:15:99:7f:9a:46:50:19:8e:
e0:55:cd:e4:10:06:46:a9:31:38:5f:80:2f:78:e6:99:e9:f2:
e9:2e:9e:4b:df:3d:66:2f:de:d8:ed:24:90:3a:70:04:c0:5c:
1a:d7:f2:d1:9a:40:23:50:29:dc:38:9d:ba:2f:43:32:8a:fc:
65:7b:99:75:9f:5c:8f:37:2f:e4:73:78:a1:42:45:77:74:76:
d2:21:e0:21:fa:bf:51:4c:e2:4a:10:aa:42:91:98:c1:57:2e:
a0:3f:20:a9:2d:df:fb:0f:fa:26:91:b5:b2:f8:b1:22:ab:28:
51:e4:c1:b9:79:ea:c0:2d:55:c9:cf:c3:0f:9c:85:ba:fe:0d:
db:53:99:be:bc:1e:d6:3e:20:eb:13:df:e0:b8:1b:c2:36:ee:
eb:4e:5f:6d:97:4c:4e:66:97:11:94:99:43:a2:cf:26:09:25:
c5:74:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:46:15 2025 by rpki-client