Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 8teBFUmzDukPoeFwkKIrkJlIijyE2GYcDXwKY0xMbwY=
Subject key identifier: 7F:38:A2:C7:1D:8B:77:83:A3:52:7D:79:DA:4C:2D:3C:16:81:D2:1B
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019A21089BE612F5A8D0F2D2714F940825BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 15:00:03 +0000
Manifest this update: Sun 26 Oct 2025 15:00:03 +0000
Manifest next update: Mon 27 Oct 2025 15:00:03 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: Xefr9iXov/vuKAYXzNMR4Mq7Nh4WXz0vU16nIVqsxVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:9b:e6:12:f5:a8:d0:f2:d2:71:4f:94:08:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Oct 26 15:00:03 2025 GMT
Not After : Oct 27 15:00:03 2025 GMT
Subject: CN=7f38a2c71d8b7783a3527d79da4c2d3c1681d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:a1:7b:eb:58:0d:65:de:33:84:60:14:c1:
3c:a4:dd:64:67:34:6b:3b:cc:0b:7c:5c:06:47:ac:
84:8a:6f:0d:c6:7a:e2:69:1e:b2:f2:60:ac:86:11:
71:e2:16:ee:20:f5:bb:83:a3:e5:5e:e3:f0:b8:5a:
fa:c1:1f:da:56:30:3d:b6:0b:d4:13:b4:68:73:8e:
1b:ec:25:eb:e9:20:3a:64:7b:a3:a2:11:b1:67:99:
b0:bc:ef:27:fd:84:b8:5b:9f:c4:9b:c9:71:99:a5:
b7:5f:07:af:11:91:1c:5f:79:9f:db:58:98:86:64:
0e:e2:d2:6d:13:6c:8a:20:40:9b:76:50:0d:44:4a:
83:ee:d6:85:b0:b3:5c:43:c7:a4:af:9d:8c:97:26:
0a:13:0a:d3:d1:0a:d1:1a:02:6a:d8:44:f8:09:a6:
4b:97:c8:27:c1:73:31:a4:a4:0f:25:e8:0f:f8:39:
a5:77:42:5e:7e:b8:87:67:ec:4b:1f:ae:78:61:bf:
0d:c4:a1:14:2d:f1:a1:32:b5:3f:f0:2b:58:35:d7:
d5:9e:4f:a1:30:ec:0b:bb:94:d7:fb:a1:07:0d:e1:
68:65:95:65:58:d9:27:57:21:f2:9c:a2:ab:c9:45:
61:d9:80:8b:28:6a:e6:91:1a:d0:67:5f:3c:79:88:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:A2:C7:1D:8B:77:83:A3:52:7D:79:DA:4C:2D:3C:16:81:D2:1B
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:a3:de:4c:84:d0:04:24:00:31:ee:d6:bf:a1:2c:ab:22:
67:4c:0d:85:87:08:b4:c3:e0:1a:40:67:a3:4a:c0:58:dc:aa:
08:ff:2b:5a:16:39:ae:39:98:0c:dd:40:e1:f1:e1:34:a8:dc:
e7:0e:b5:cf:b0:82:36:c4:33:4d:61:fa:73:07:5d:8e:93:a8:
a2:9c:ff:22:fe:70:ac:4c:15:da:25:cc:87:d6:e3:68:82:14:
4f:d7:d5:5b:24:ea:3b:2b:38:8f:f7:26:6a:b5:20:a2:a3:97:
24:ad:90:38:d7:9b:7c:be:7c:b4:f2:8c:18:9c:af:ba:28:d2:
50:97:a7:48:43:4c:b4:bf:3e:63:04:36:69:fa:c9:bd:e9:b0:
76:e6:2e:7e:ab:54:dc:87:db:80:63:d6:d8:b6:bb:a2:f6:ee:
f3:e3:0a:ea:da:9e:81:cd:6f:5c:50:5a:c0:cf:c0:23:fd:d5:
e8:6b:5d:df:33:a4:19:6a:84:e2:31:2c:88:07:2f:a7:7c:02:
d3:a1:42:44:ab:f5:f1:e8:35:18:8f:ad:16:43:b5:24:bd:8d:
0d:5f:a6:0c:8a:81:43:98:4c:58:b5:00:0e:68:e0:51:97:ef:
84:37:74:e4:46:d7:af:89:53:a5:cf:b7:03:12:8e:a9:76:0e:
34:0f:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:33 2025 by rpki-client