Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: s9SbeKYJPzmE5OgNnkdfYXkgMfNT8F3I0BQMtOdg6K0=
Subject key identifier: F4:09:5A:EE:B8:53:CE:FF:86:EB:D1:AF:50:BD:4D:4B:3B:BC:22:EB
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019A0C6F52CE804C5A8C270C261857F11A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 16F0
Signing time: Wed 22 Oct 2025 15:00:13 +0000
Manifest this update: Wed 22 Oct 2025 15:00:13 +0000
Manifest next update: Thu 23 Oct 2025 15:00:13 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: jrjWRpIQOBEFAN3wN984zX2re6Np6mThbPixNKld5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:52:ce:80:4c:5a:8c:27:0c:26:18:57:f1:1a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Oct 22 15:00:13 2025 GMT
Not After : Oct 23 15:00:13 2025 GMT
Subject: CN=f4095aeeb853ceff86ebd1af50bd4d4b3bbc22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:da:54:35:9a:db:e6:0d:b3:b9:c6:27:ad:
76:01:7e:20:22:c3:dc:bf:0f:a6:65:21:73:8a:ce:
bc:b3:b5:d0:ae:9b:0e:4a:36:a3:aa:f1:8e:ce:c9:
99:e2:16:cb:d6:ae:62:cb:42:5a:3e:e2:50:83:09:
2f:4e:80:be:00:78:f9:fa:a0:37:58:f7:58:7e:2c:
9e:1e:46:e5:77:11:be:bb:e5:15:a9:1f:66:14:66:
e9:fc:c0:c1:a2:54:bf:31:6e:77:bd:e3:a0:9e:71:
da:51:4c:e9:8c:9f:fa:5a:a6:9d:cb:bc:30:bd:15:
bd:72:24:d6:ac:53:27:d5:e2:16:21:02:89:c9:99:
6a:54:7d:a9:0f:23:f8:73:16:ba:44:a8:52:94:0d:
6a:80:a3:aa:88:2d:94:b7:64:94:d1:68:63:80:0f:
2a:68:72:df:09:23:6b:1a:73:d9:54:84:d6:c3:51:
e2:b3:29:8c:ef:5f:68:98:64:b8:a0:bf:9f:57:21:
7c:46:fa:15:34:a8:25:6a:05:69:9f:a0:d1:67:32:
5c:bd:b3:75:0b:a1:d5:6e:43:84:66:b8:92:65:fa:
31:3d:8f:99:a9:87:17:66:47:17:3a:09:d2:7e:0f:
f0:9a:22:5d:f8:24:f6:23:e2:55:b4:bf:0a:f2:53:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:5A:EE:B8:53:CE:FF:86:EB:D1:AF:50:BD:4D:4B:3B:BC:22:EB
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:ea:a0:8d:55:6e:7e:dc:e7:80:ae:a4:a8:4d:b6:ab:23:
8e:3b:d8:ca:9a:cc:58:07:c9:b2:d8:bd:cb:38:a1:4d:8b:ed:
be:75:44:a5:19:c1:a3:a4:6f:45:7e:8b:48:90:49:1d:12:26:
ed:b8:7d:32:68:3c:31:7b:0f:2d:19:65:3e:bc:85:45:6d:ef:
9d:a0:99:2d:e2:74:18:d2:b9:19:98:54:23:c1:7d:be:2c:76:
83:dc:2f:57:0c:5d:80:29:10:af:00:6c:65:92:cf:11:bf:5c:
26:f4:c6:97:73:96:ae:fb:5e:59:29:b2:4d:e9:76:9e:3b:c4:
8a:54:df:df:a5:1c:74:a5:cd:b4:39:ec:63:34:4c:6f:f7:15:
b2:c2:fc:46:c1:f6:34:aa:0f:a1:45:7d:03:5f:97:6e:73:24:
f4:eb:a6:d9:d8:d0:cc:29:a1:ce:3e:81:3e:21:a4:7b:93:51:
1c:a6:37:0f:ca:6f:95:6a:c4:f9:6d:ee:9c:0b:ef:ef:77:a7:
f4:59:34:2f:5c:ae:1b:0f:88:b7:e8:7a:04:64:a0:74:87:9c:
e7:ff:9e:6d:77:de:4f:e2:19:cd:0d:25:05:a8:56:75:62:1b:
1d:48:4a:b0:b2:a8:7a:9e:3a:2b:75:59:3f:57:9e:2b:ef:b1:
8c:62:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:52 2025 by rpki-client