Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: Z3g01h4bEKC3hxI/xgVa0/erGHgvX454UduSmb4KD60=
Subject key identifier: EF:07:D3:50:AC:72:2B:7A:45:C6:D7:1C:9C:BB:B8:FB:09:E1:BA:0F
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019A1F88B3D4328056A61CC81C7432C81D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 08:00:43 +0000
Manifest this update: Sun 26 Oct 2025 08:00:43 +0000
Manifest next update: Mon 27 Oct 2025 08:00:43 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: IdyQzCGo/uvvl+XSEZg6mVLafwq+hwLQNrhC1MYug2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:b3:d4:32:80:56:a6:1c:c8:1c:74:32:c8:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Oct 26 08:00:43 2025 GMT
Not After : Oct 27 08:00:43 2025 GMT
Subject: CN=ef07d350ac722b7a45c6d71c9cbbb8fb09e1ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:5a:2b:fc:9d:fb:b4:29:9d:8a:45:99:d7:
7e:f9:29:ec:85:46:1b:c3:bb:bd:eb:33:f8:33:4d:
44:61:2d:76:63:c4:3f:80:1d:b6:b8:c4:fd:76:41:
d5:b7:ca:26:6a:81:cd:da:65:40:ed:45:60:9a:3f:
ee:3a:07:31:d5:16:81:71:ce:81:5f:f5:29:9d:6a:
9f:31:4c:10:bc:cc:18:76:42:a5:59:28:ee:ce:49:
b8:14:73:ed:e1:04:6b:62:7a:2c:a5:ab:3f:0f:29:
58:ca:ed:82:a2:c0:56:18:75:2d:3e:31:ba:1a:70:
bc:60:36:e5:b3:27:4d:a8:26:39:9a:94:02:8a:92:
d0:ce:28:d2:fe:d1:f1:58:90:c8:8f:0a:9c:5f:d9:
13:b8:be:03:5d:a5:57:9e:5a:4e:41:5d:74:1d:79:
b9:0f:00:29:36:ce:e2:86:98:3c:f3:b7:c6:27:a0:
7e:84:7d:17:3a:95:8e:d3:7a:c7:e5:a7:0a:df:94:
91:75:94:56:66:e2:c7:30:b6:c1:9b:0f:0b:eb:07:
0e:6f:4d:c1:2f:d3:71:19:8d:74:de:b6:3b:2d:fd:
95:6c:78:68:ac:15:fd:20:17:05:bd:0c:2b:c0:e7:
66:f4:c7:db:fa:f0:ed:23:94:19:ef:20:53:39:c4:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:D3:50:AC:72:2B:7A:45:C6:D7:1C:9C:BB:B8:FB:09:E1:BA:0F
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:1c:ea:68:96:e2:c4:3c:ec:8a:a1:9d:6b:7c:04:8f:fd:
ff:2a:ba:60:f2:38:cc:0f:8a:f7:9a:1c:cd:27:81:5d:eb:8b:
ac:99:32:da:a9:5a:2d:86:19:ac:3d:a4:31:71:2a:b4:f4:02:
47:4a:3d:cc:61:43:3c:cf:24:b9:dd:a1:b9:bc:42:3d:d6:04:
b6:66:c1:1f:4c:57:b4:4d:7a:ee:ad:28:ba:cd:01:dc:66:c4:
71:db:c3:a6:48:e9:53:95:88:6c:91:41:35:1b:ff:85:bc:c7:
07:90:ac:5a:41:aa:b3:19:fb:b3:ad:3b:89:02:5b:6e:27:95:
1e:a1:3a:a8:0a:89:3d:56:81:6d:b0:df:19:66:18:cb:16:54:
19:d3:72:27:6a:c4:dd:dd:56:18:bf:2d:a6:2a:28:24:f6:a8:
d2:b2:ff:11:2a:15:24:bf:d3:35:a1:89:70:61:54:33:51:ed:
a9:31:4d:f4:0d:60:6a:9e:c6:b8:58:16:25:7a:6d:02:c6:00:
ca:35:26:55:61:e5:96:7d:88:f1:2d:a4:2c:01:ec:eb:57:0d:
55:fa:10:72:fc:ca:b7:80:ed:37:8b:0c:60:84:cf:65:c2:3b:
24:da:94:28:6a:6f:b8:d5:76:2e:25:8f:48:89:e6:08:bb:f4:
6b:fd:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:34:26 2025 by rpki-client