Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: YkIl5FQHf2Frc1XgoDsXAzS1ZaLN7ZzO+Tz152cXwsU=
Subject key identifier: C7:77:8F:7E:5B:30:75:0A:E4:70:2F:8F:05:0E:76:25:70:C0:BD:37
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019A27E686CFF6986A0DFD78FCE2CE45DDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 23:00:10 +0000
Manifest this update: Mon 27 Oct 2025 23:00:10 +0000
Manifest next update: Tue 28 Oct 2025 23:00:10 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 8DpzIAbbZ2bzNXKNe532JqxHn94wl4Ak0nXST1NV63Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:86:cf:f6:98:6a:0d:fd:78:fc:e2:ce:45:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Oct 27 23:00:10 2025 GMT
Not After : Oct 28 23:00:10 2025 GMT
Subject: CN=c7778f7e5b30750ae4702f8f050e762570c0bd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:7d:64:80:07:1d:40:06:10:ee:03:c2:66:
c5:99:87:ce:ef:13:b7:b1:58:36:ce:07:d3:19:ef:
05:48:6a:f8:fe:ea:92:5b:11:66:70:f0:88:64:8a:
da:80:36:c5:d7:bb:b7:43:6d:15:74:57:44:24:6a:
80:4a:10:03:5f:9c:31:f4:c6:8f:0d:2a:ca:e1:2a:
b5:53:63:85:5e:95:61:74:9a:42:c8:bc:66:db:0b:
d2:0a:c5:1f:c2:d4:ed:85:c3:5b:2b:ba:96:31:df:
3e:5e:72:f0:26:d9:27:80:b1:2c:a6:38:12:7e:9a:
3e:98:b0:64:c2:00:20:a4:ac:f1:92:b6:43:d6:79:
bd:a2:a2:e8:0c:72:df:3e:18:85:73:90:b5:ab:f7:
b0:62:29:99:98:f0:dd:85:c0:62:39:59:f5:e2:e6:
84:1f:45:c0:c2:75:ef:df:84:09:69:78:48:1e:9c:
d8:36:79:f7:c4:4e:cf:1f:e9:ae:21:0a:46:67:17:
f8:38:cf:1e:14:bb:e7:80:f6:82:41:8f:32:16:d2:
2f:02:a6:1a:eb:01:19:20:55:85:4a:79:aa:24:83:
26:ce:f0:01:6f:54:68:7e:d8:79:34:16:06:1d:d9:
8e:c5:76:54:8d:c4:34:d6:a1:61:19:22:f9:6e:9c:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:8F:7E:5B:30:75:0A:E4:70:2F:8F:05:0E:76:25:70:C0:BD:37
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:27:5b:d3:66:1d:74:96:cf:03:40:17:7f:b6:7b:49:b1:
51:53:2e:a6:bc:32:b3:88:7f:ca:5f:74:dc:8b:ec:81:b6:49:
67:72:7a:0b:8a:a4:bf:2e:08:99:18:c1:7e:81:69:11:fe:cb:
88:8c:ed:8e:81:3b:7a:3c:4e:15:da:16:18:e5:85:50:03:cb:
00:0a:98:0c:04:e7:f0:d3:5d:50:4f:cd:8e:40:5f:80:97:67:
f5:b8:8c:38:cd:02:6d:5d:58:f8:8f:83:ac:ab:aa:39:e2:03:
33:51:01:31:ab:b1:83:ff:c7:90:03:55:4d:c7:27:ad:28:54:
38:42:85:54:9a:0f:27:9a:12:30:ae:fb:c2:16:88:6e:19:10:
e3:64:08:57:80:21:e5:a8:5b:3e:eb:27:14:67:83:81:1c:3c:
74:1b:6a:55:a2:f5:3e:51:17:4a:dc:c2:75:78:26:6f:37:0d:
5b:0e:12:bf:aa:f2:02:ea:fa:89:85:ad:88:d6:b6:6a:6d:2d:
51:cf:d5:d5:fc:0c:f1:88:ce:45:48:63:54:e0:d5:13:8f:a6:
4a:ff:48:14:68:e2:ca:12:eb:ba:ab:62:cc:cd:64:d0:61:59:
b7:7e:41:55:59:ec:b5:2a:ed:7f:be:8e:dc:ff:56:f0:66:86:
f1:81:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:09:06 2025 by rpki-client