Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: ZyS4vWf9V08DyWsHuh6RBdfA+qdPpTxr+8grAbDt5Bo=
Subject key identifier: EA:61:C7:5B:F8:60:31:45:DF:C0:31:2C:DF:89:43:D7:49:46:CF:59
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019A1B073559305BD847B12468C1148A46FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 016F
Signing time: Sat 25 Oct 2025 11:00:48 +0000
Manifest this update: Sat 25 Oct 2025 11:00:48 +0000
Manifest next update: Sun 26 Oct 2025 11:00:48 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: TNlJNlTiA9vTBDZlT4VaTjTf9xgCzV+4VwC3nQ8JmQA=)
2: oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa (hash: C+won2ayhOZhVuYFZ85jDDGUEWPlmXvRmRnHCUNjIgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:07:35:59:30:5b:d8:47:b1:24:68:c1:14:8a:46:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Oct 25 11:00:48 2025 GMT
Not After : Oct 26 11:00:48 2025 GMT
Subject: CN=ea61c75bf8603145dfc0312cdf8943d74946cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:4f:29:b5:02:6d:b6:55:22:2a:e5:2d:28:
82:13:1f:92:19:27:8b:31:8a:47:79:ed:94:ce:d3:
91:f5:a5:d0:0d:ed:2a:8c:d3:da:03:11:12:35:e0:
da:5b:27:52:b8:b4:0d:32:9f:83:1e:f4:d3:fa:f7:
d5:fe:84:b5:9a:fa:3a:9b:89:cb:33:33:a2:34:d6:
d0:5f:8a:d3:d5:9c:31:4f:e0:e4:33:fa:a8:0a:ac:
27:17:d2:36:24:b3:45:e0:d9:b6:52:2c:5d:fc:e3:
ae:7d:67:af:df:2b:31:df:31:ec:56:a2:6f:20:14:
dc:6e:00:58:40:c5:69:9e:bd:b8:c4:d1:6c:99:b0:
e5:aa:6b:13:ac:af:12:a2:72:6a:a8:2f:72:6f:f5:
91:09:ac:54:d5:2b:34:09:e6:d7:9b:c7:3f:94:8e:
37:9a:28:54:3b:5b:be:20:ac:a2:98:c1:c7:93:e3:
97:d2:19:fa:e0:e1:59:27:ef:c1:f0:de:a3:fa:cd:
e5:f3:ef:dc:5d:c8:f2:83:39:d1:81:ea:23:8b:cc:
b0:4f:c1:bd:09:5a:db:50:a1:86:d3:d3:a9:d9:84:
ee:30:0e:80:eb:88:a9:36:31:be:ab:d8:72:23:e3:
f6:cb:95:85:5d:4b:e8:9d:5a:cd:a5:bc:4e:c2:df:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:C7:5B:F8:60:31:45:DF:C0:31:2C:DF:89:43:D7:49:46:CF:59
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:91:77:dc:f8:8f:18:f5:22:f7:83:c9:94:b4:f5:99:df:
22:88:85:44:a6:7a:ff:9f:43:e3:84:2e:fb:f1:3f:81:05:e0:
99:b3:d2:d5:09:89:f4:f0:2e:46:e7:bf:fe:24:e4:f1:c9:29:
ab:4c:6c:18:34:b6:ed:57:ae:b7:cb:df:13:04:40:88:71:91:
43:ed:f6:16:50:85:47:56:2d:c1:47:ad:4d:3c:15:8b:9a:59:
62:71:6d:90:9e:db:3b:13:ee:5d:3d:8b:cb:37:74:2f:62:86:
41:08:13:5f:7b:19:0b:67:c7:44:29:96:e7:70:d1:35:9d:1c:
16:cb:a3:53:98:12:dc:71:61:6f:33:39:21:22:ac:3c:0d:f4:
72:28:b6:8c:e6:1c:70:d9:47:cb:cd:94:fc:3e:4d:4a:c3:0b:
7f:7a:3a:a6:e4:b3:78:cf:ca:bc:f1:24:36:68:a4:e9:e8:93:
9e:67:96:e5:d5:e0:56:16:b9:fe:6d:fb:1d:dc:ce:1d:db:4e:
97:46:aa:67:fa:19:85:e7:56:3f:a0:1c:2d:b3:08:7f:2b:1c:
ef:3a:a8:7e:1e:02:78:7e:7c:42:e6:bb:bb:61:1a:87:7d:ff:
e5:b1:3b:3a:50:e6:8b:d4:3d:8c:9e:34:2b:ba:b3:b1:e9:f0:
23:69:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:42:34 2025 by rpki-client