Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: t9r4w//WLeY6K4MppKfCmpDxHixkdaLcUaIAo42KmTk=
Subject key identifier: 70:20:72:C6:04:C9:A9:04:AC:7A:82:05:78:F2:56:83:A9:BB:B1:C2
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 019A299E222813C9D57E9E8F834D712B1310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 07:00:20 +0000
Manifest this update: Tue 28 Oct 2025 07:00:20 +0000
Manifest next update: Wed 29 Oct 2025 07:00:20 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: nKleCPWa0A5Sb1u8eATNwyKLGlyGwV+ccYuboOFfGaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:22:28:13:c9:d5:7e:9e:8f:83:4d:71:2b:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Oct 28 07:00:20 2025 GMT
Not After : Oct 29 07:00:20 2025 GMT
Subject: CN=702072c604c9a904ac7a820578f25683a9bbb1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:20:b8:f1:9c:54:5d:b5:b3:62:d7:80:b0:
7e:4b:39:6c:25:8e:c3:35:83:49:c8:97:48:74:20:
d2:a9:77:57:ee:c6:0b:19:4c:64:11:b7:f5:f3:14:
60:c4:67:0d:4d:65:b9:93:0b:2f:4b:5b:89:5c:0e:
54:e9:02:ec:73:0e:18:d1:43:55:c9:64:27:f2:48:
d5:13:0b:f7:90:e8:f3:59:ec:6d:6f:8f:4a:5e:76:
af:52:a0:59:39:c9:34:cd:4d:18:e4:62:1b:e6:52:
ea:50:30:1b:84:11:0a:f5:4c:f4:ff:76:37:ed:5b:
6e:41:f0:3b:20:ec:e7:64:69:03:0d:67:3e:c3:50:
6a:a0:f8:da:35:d3:de:2f:bf:06:e3:eb:22:f5:26:
c8:e4:e5:6f:28:43:3a:e3:03:93:aa:40:af:f8:29:
05:38:66:85:cb:5a:7b:5f:6a:17:56:5c:4f:26:79:
36:da:34:33:a5:d1:7b:ba:54:ea:d3:af:ea:71:fc:
e2:03:fc:e3:3b:bc:99:97:b3:ce:c9:e6:59:97:fa:
58:62:6e:bd:5b:28:78:d0:d9:55:53:e5:36:f1:e4:
d2:4b:d2:5b:85:16:e9:a8:63:6e:d6:c7:1a:21:2e:
95:06:cc:b3:0f:d6:98:c2:6f:39:d7:fd:8f:c4:99:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:72:C6:04:C9:A9:04:AC:7A:82:05:78:F2:56:83:A9:BB:B1:C2
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7c:54:c0:02:75:12:ea:df:44:1f:db:ad:5d:35:c6:00:ff:
19:e3:cc:1d:61:d8:04:ff:b8:84:b4:c1:87:26:ab:b1:06:71:
aa:ab:d4:ed:ea:20:16:01:c4:d4:6e:b7:88:1c:be:aa:78:6c:
9e:3c:34:d1:3b:d5:bc:49:31:70:36:57:ab:ae:a8:a5:eb:4a:
87:8d:e4:86:1d:30:4c:88:e0:d4:dc:07:96:60:a7:36:f7:4b:
a8:47:81:29:79:59:73:0b:e5:20:9b:a6:21:f4:6a:18:77:23:
f0:61:65:84:9d:14:48:6c:e9:14:8a:df:e7:3d:d7:f5:6a:3c:
19:65:fa:67:ab:6f:df:57:f8:7f:3d:80:c7:5a:90:4a:98:26:
3e:60:1f:7b:87:55:0a:60:2f:92:cf:d1:10:f9:46:55:17:7a:
63:0c:ad:c1:9b:f4:22:83:f1:a0:69:bd:ae:68:1e:c9:6f:0b:
07:04:a4:ff:22:bb:55:33:e7:c8:2e:46:ab:2c:e8:c3:99:b8:
14:d9:72:ad:0b:fd:e6:a5:61:0b:bc:cf:37:02:3d:cb:6a:c5:
9e:6e:c9:f3:f6:d6:5b:c4:8e:26:54:cb:cc:35:22:aa:c7:a7:
21:bf:b2:28:62:5f:ef:c9:c0:55:5f:85:96:97:88:2c:0a:25:
bd:15:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:31:54 2025 by rpki-client