Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: oiirc5BLOTmDKIDMV2uAIHp5guQO0hlBiNRwIUnXlK4=
Subject key identifier: CE:2A:47:09:F4:BA:81:EA:AB:59:BD:44:F2:E8:02:50:05:81:31:15
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019A1A61BBABDC4EC2D10AF7066F2FD418D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 08:00:03 +0000
Manifest this update: Sat 25 Oct 2025 08:00:03 +0000
Manifest next update: Sun 26 Oct 2025 08:00:03 +0000
Files and hashes: 1: S4M1yLaoUkBNpr3z25JQH_BGArI.roa (hash: u9aDojpNlhB36wlUGghNH/x88dKTjNyPYfwfTMBmtv4=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: 3LLNNt12UYWdJ2SHnZj6uLXjQFXyA95O6oyCUprfwfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:bb:ab:dc:4e:c2:d1:0a:f7:06:6f:2f:d4:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Oct 25 08:00:03 2025 GMT
Not After : Oct 26 08:00:03 2025 GMT
Subject: CN=ce2a4709f4ba81eaab59bd44f2e8025005813115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:c5:31:37:32:cf:58:6e:fd:09:e8:f3:e5:
76:ba:f6:3a:ad:07:d9:a0:cf:16:dc:8e:59:8a:12:
b4:cb:25:be:51:a8:da:7f:1b:05:66:80:c4:5d:0b:
9c:1a:f2:cf:ea:b8:d2:19:61:d9:72:f6:2c:b1:e9:
38:b7:a0:97:ef:f6:bd:1c:a4:a2:8c:a4:d4:b9:7f:
84:22:7b:68:52:ee:be:44:6a:9b:b8:c8:d0:67:ec:
73:04:63:02:12:2d:99:3f:87:aa:4c:58:61:bc:ee:
ca:b6:f6:16:d4:e9:bc:22:36:db:c8:d3:13:ee:aa:
c8:87:d5:22:6d:b0:d7:54:4d:1c:df:63:c9:d2:85:
ae:1c:1e:41:e8:3f:5b:b2:a4:c3:63:f9:5f:28:77:
a9:9c:23:2c:e9:15:4e:de:4b:0c:61:52:3b:1e:8c:
9d:29:e4:c7:58:d8:b9:d5:ac:f9:06:29:d9:0e:32:
cd:7c:9c:62:e1:d5:23:2a:59:63:69:d5:6e:2f:c2:
53:21:09:b9:14:c9:72:bf:a0:48:9f:33:c6:b4:be:
16:e7:2f:7b:6d:e7:ba:f1:6a:d2:fa:4c:52:96:be:
63:26:97:c0:ac:57:36:87:27:17:42:47:a3:da:04:
5e:4d:d8:81:c1:00:30:bb:65:a7:71:ef:9f:c2:dc:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:47:09:F4:BA:81:EA:AB:59:BD:44:F2:E8:02:50:05:81:31:15
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2f:b7:e5:37:83:38:c2:61:c3:25:eb:02:fb:38:31:ba:05:
62:e5:43:e3:00:0d:11:24:bb:2c:57:86:77:7a:20:f5:19:0d:
83:20:47:e3:76:01:bb:1d:c9:7f:08:4c:c1:9b:6f:d5:1f:6e:
c6:9d:74:83:d5:11:22:39:30:d9:80:8a:ef:9f:b8:21:7a:75:
dc:1c:34:13:68:9b:bb:ec:4d:15:db:6d:e7:d2:03:6e:57:9a:
7a:18:66:cf:31:20:74:97:92:7e:8f:08:c2:4d:60:a6:64:06:
2f:7e:b3:01:7d:e1:81:c1:77:a2:ac:5b:0e:fa:28:03:0c:4c:
c7:f7:9c:10:12:01:6b:a1:9c:bc:be:25:5d:9e:29:94:b9:3f:
e4:cd:ec:01:37:21:ef:a2:1f:95:47:80:44:07:42:06:51:28:
b4:c0:89:4e:3a:6b:4f:4c:f1:19:a9:19:79:1c:b8:7d:42:3c:
b3:34:bb:23:5d:f1:69:0d:a6:49:fe:29:14:ca:82:66:3c:40:
69:30:db:d1:8c:92:97:2f:77:1c:53:35:fa:a5:4e:57:ba:5a:
f2:33:6f:1f:2a:23:2c:9a:82:37:79:ac:5d:37:4b:39:bd:d7:
61:7c:6c:2c:01:69:71:20:7c:b4:d6:14:67:c6:dc:94:5e:5a:
57:98:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:26:32 2025 by rpki-client