Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: V/YEnJ3jmx83DbViW+NUaGT8MhjlvRjXcgRmprG8lLM=
Subject key identifier: 5D:88:DD:A0:03:CB:E2:F1:11:CE:04:F2:8B:DF:21:38:92:ED:C3:EE
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0199CC10E80774854413CEB9A9C04D3B962C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 16C9
Signing time: Fri 10 Oct 2025 03:01:23 +0000
Manifest this update: Fri 10 Oct 2025 03:01:23 +0000
Manifest next update: Sat 11 Oct 2025 03:01:23 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: nIBsuN5XmVvLClG90CRBrZdTRk/ffMQYl1E+9r11LVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:10:e8:07:74:85:44:13:ce:b9:a9:c0:4d:3b:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 10 03:01:23 2025 GMT
Not After : Oct 11 03:01:23 2025 GMT
Subject: CN=5d88dda003cbe2f111ce04f28bdf213892edc3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:20:dd:a3:d7:72:aa:c8:7f:52:77:0c:a5:
a2:47:57:6f:6f:6a:e1:00:03:2f:c0:32:ce:93:61:
64:77:da:b5:61:78:94:d1:06:3e:e2:d2:6f:e9:05:
71:cd:12:5b:9b:63:ce:ee:4a:82:20:08:b3:9c:7c:
95:80:3e:1a:7f:23:33:d3:c5:a6:f7:02:58:52:70:
cd:2e:d3:7d:28:fa:f2:7a:69:bf:55:33:1d:ca:54:
e5:f2:8d:e4:07:64:ad:07:c1:7a:05:0f:57:6f:a1:
55:31:3e:74:08:08:13:b9:a1:f3:cb:77:06:89:f4:
6f:2c:54:0d:00:ac:74:a0:87:da:b8:c3:c9:42:b8:
ed:4e:b4:17:d6:e9:32:52:3e:f2:7c:39:79:57:5d:
87:55:ec:5e:f3:9d:d9:6b:84:cc:93:70:98:b3:2b:
4b:56:73:1c:83:99:ef:30:6c:3f:fc:cc:7c:86:7a:
bd:6e:5b:f8:63:7b:32:2b:86:87:26:3e:1d:8a:ed:
d4:87:3b:56:6f:18:cd:3d:7b:12:63:44:db:e3:17:
44:cc:06:c5:fd:03:a1:3f:6e:62:c7:d3:98:d1:fa:
2d:e7:3e:29:a8:6c:d3:4e:71:53:ad:29:9d:67:15:
12:0b:5a:3b:98:e3:2d:36:30:ba:06:f8:31:4f:e1:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:88:DD:A0:03:CB:E2:F1:11:CE:04:F2:8B:DF:21:38:92:ED:C3:EE
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:ad:53:af:99:a0:e3:b3:bc:6d:39:7d:9e:93:63:8d:67:
91:c2:4d:4b:9a:b3:b8:1a:bd:9d:dd:89:47:e5:14:76:a2:5b:
00:1b:d1:5a:0e:f9:57:53:41:e3:11:d9:bc:ad:33:69:4d:f6:
a4:b6:57:ae:0b:97:cb:38:35:cf:8c:f1:83:f5:ac:3c:25:ce:
f5:1a:f2:be:93:3d:72:52:4d:f9:ef:be:0a:ee:01:1a:3c:4d:
8f:22:a2:38:2b:5c:57:37:fc:6e:3e:f4:67:b5:24:e8:f6:9e:
35:41:09:a0:65:0d:e0:0f:b6:ff:3f:37:d7:89:d4:0a:f8:06:
3e:97:7f:3a:c0:f4:50:d5:a2:22:4c:d8:29:17:72:fb:aa:af:
1c:97:2e:b6:29:99:d9:36:15:53:8f:47:4c:3d:66:14:fc:98:
54:89:56:31:af:91:d1:3c:c0:ae:cc:20:f3:82:63:16:3b:a9:
22:39:9b:14:02:ea:03:21:ef:e1:04:43:cf:be:95:a3:1f:30:
cc:68:e9:79:06:0e:06:8e:19:9c:bb:1c:cd:35:9e:7a:a9:e9:
2a:dc:de:cd:57:fd:75:3d:b0:e4:d8:ef:1b:8c:ed:24:a0:cb:
92:27:00:a5:67:68:9f:c3:bb:45:bf:8e:1c:b2:4a:75:08:f6:
91:7f:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 10:32:42 2025 by rpki-client