Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: ormmosVWX3YV9Vt9Mdyb6I44wIsQvVgkm+rDVFO+zQo=
Subject key identifier: EB:81:99:51:BD:3C:A1:56:80:08:01:0B:01:D1:E0:70:4D:28:5A:8D
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019A1E07F64BC59580DA07619F6D845FA42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 01:00:29 +0000
Manifest this update: Sun 26 Oct 2025 01:00:29 +0000
Manifest next update: Mon 27 Oct 2025 01:00:29 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: ZZaZe2t4SbQUJx0uk/dK6MclD47kZzZrIbBxbZzqcfk=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:f6:4b:c5:95:80:da:07:61:9f:6d:84:5f:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Oct 26 01:00:29 2025 GMT
Not After : Oct 27 01:00:29 2025 GMT
Subject: CN=eb819951bd3ca1568008010b01d1e0704d285a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:53:c2:df:38:49:0e:a0:3f:78:6f:7a:ed:
71:09:95:4a:8a:cf:e5:b9:3e:67:ae:a4:2d:4b:87:
b9:cb:1b:4c:07:98:8f:c0:8d:cf:df:b7:c5:3e:ac:
a2:36:de:a7:d9:29:64:f3:00:64:e3:ef:e7:c4:77:
1a:0a:44:0d:85:16:12:c7:03:47:71:9d:c0:05:a1:
6d:53:7c:8c:3e:13:7d:0b:5d:7b:50:29:12:28:15:
32:71:22:ac:2f:dc:ed:cd:fa:e4:18:0a:90:0a:79:
97:e6:58:61:03:3c:59:ac:94:8b:e6:a7:66:75:b4:
4a:fe:eb:0c:e4:ac:ef:c5:9a:23:b7:a1:f2:c1:7e:
9b:bd:06:d2:0b:30:a8:04:22:c2:40:37:9c:b9:86:
a9:c1:2a:d2:3d:13:a6:6d:19:37:b1:4e:f6:54:55:
ec:d9:bf:c0:df:04:d2:91:a1:1a:2a:49:57:63:6e:
63:62:7f:cb:08:6e:cd:67:e6:d9:61:a5:65:8f:99:
ec:7a:0a:80:a8:38:25:82:60:64:96:22:00:74:3e:
3c:f4:e3:db:04:32:aa:8a:98:7a:66:d2:6f:f2:b1:
c8:5a:af:65:19:1a:0d:40:9a:b7:60:fa:5d:0e:33:
c6:96:11:e7:49:dc:1d:59:af:d2:f5:16:a1:7f:27:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:81:99:51:BD:3C:A1:56:80:08:01:0B:01:D1:E0:70:4D:28:5A:8D
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0b:1f:ae:51:54:6a:ab:fb:6d:7e:2a:d3:78:1d:67:f3:3c:
41:bd:db:94:42:57:73:de:cc:df:7e:0d:cb:68:f0:50:96:46:
c9:dd:27:22:6e:46:b2:65:6a:39:d9:bf:4f:87:fe:31:a3:dc:
da:15:6b:22:60:a0:80:a4:1e:05:32:a5:e5:54:3b:1b:b6:ac:
3a:d6:24:fe:24:36:a3:2e:08:ae:8d:89:cc:91:22:bc:b5:67:
ad:62:30:af:66:48:e2:01:7c:a3:d4:46:77:f2:38:f3:31:2d:
ba:41:ea:d7:b6:c7:1b:30:6d:bf:52:3f:6f:33:e1:fa:89:5e:
fb:8d:ed:62:94:38:0b:7b:c4:92:3f:b6:36:a2:23:dd:2a:60:
38:d5:1e:8a:f4:74:58:3e:07:06:06:73:db:ef:cb:5b:af:76:
2e:72:b6:e2:5a:af:20:19:a8:80:3c:51:af:88:fe:3d:fe:ff:
40:69:ae:cc:34:45:dd:8d:26:ab:39:16:fa:ce:66:0e:0e:89:
e4:23:3b:1f:5b:20:de:e1:47:5c:fa:b7:51:ef:84:58:7b:8a:
2b:2f:ca:11:ec:07:8f:db:d7:cb:cb:00:ae:97:45:b1:04:d7:
0b:d3:fc:e7:dc:b7:41:35:74:25:ba:7b:19:d4:66:e3:13:08:
65:9b:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:44:39 2025 by rpki-client