Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: iTa4W4euLwGKmZUVuFOMLtVBZz8MaXpB7/C6W2xDeQY=
Subject key identifier: 42:2A:97:2E:E8:1A:BE:4A:08:74:F6:A8:72:92:E8:6A:29:0B:AD:76
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019A0A136F11FFF7B85C3C68E53F0A0AC02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 16EE
Signing time: Wed 22 Oct 2025 04:00:36 +0000
Manifest this update: Wed 22 Oct 2025 04:00:36 +0000
Manifest next update: Thu 23 Oct 2025 04:00:36 +0000
Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: GKrUbXbPx1hd56D0A9ByNE8O85EZENz/xuZNr7FHtkE=)
3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:13:6f:11:ff:f7:b8:5c:3c:68:e5:3f:0a:0a:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Oct 22 04:00:36 2025 GMT
Not After : Oct 23 04:00:36 2025 GMT
Subject: CN=422a972ee81abe4a0874f6a87292e86a290bad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:fc:41:d8:1f:e8:69:0a:17:9b:b9:bc:01:
f6:74:e2:05:27:6e:42:97:02:ff:31:75:cd:d6:14:
fc:09:65:f3:b1:8b:ed:05:94:33:ae:ba:a8:cf:0f:
ed:60:01:98:af:85:e1:7a:fa:00:4d:03:ab:c2:22:
ca:c5:e8:52:08:3b:63:93:f5:02:7b:e6:27:eb:7d:
78:68:7e:ce:66:fe:fa:21:15:9b:d3:e3:03:d1:61:
b8:54:16:71:47:b2:86:a7:9c:3b:8c:64:2a:e6:16:
b6:95:37:bd:32:9b:31:60:fa:d6:80:5f:e6:b3:30:
ed:ef:9e:25:71:eb:e0:bc:a6:df:43:18:79:56:42:
80:5c:c4:67:f5:c6:83:d6:ad:8b:15:49:97:68:28:
ad:7f:6a:dc:c5:86:c5:2b:3f:e5:c5:1f:92:8f:c5:
f1:01:82:c9:23:d1:16:bc:72:c4:cd:a2:b9:26:ea:
6c:04:bb:7d:d5:1f:b7:6f:0c:78:11:f0:0a:eb:ff:
d7:40:f0:37:10:24:06:73:c4:ca:b0:b8:0a:0c:e1:
53:82:f6:e3:31:78:b1:f9:2e:f2:91:d8:c0:34:43:
a7:d6:f5:34:8a:b5:2f:bf:4d:9a:b8:d2:b2:9d:7a:
7f:f9:15:03:f8:12:f3:8d:55:dc:d4:c5:9b:51:fe:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:97:2E:E8:1A:BE:4A:08:74:F6:A8:72:92:E8:6A:29:0B:AD:76
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:e6:ba:88:02:6b:29:ae:6a:7a:d4:71:f7:1e:86:2b:11:
7d:74:03:8f:64:8a:e5:df:bf:6e:86:30:64:b5:09:e1:16:73:
15:7c:e5:20:45:29:87:cc:8d:92:e8:24:e6:ca:d6:85:60:33:
fd:05:b1:63:3a:6a:30:2b:3b:23:6d:a6:a5:9f:48:e6:5f:90:
a8:98:71:8a:b4:ec:75:52:3c:b3:3a:61:89:f4:e0:32:2b:f1:
43:0c:18:ef:a5:47:75:92:60:b7:d7:d8:28:7e:a2:0e:32:49:
3c:44:54:8a:3a:c5:92:38:ec:9a:34:f8:9b:f5:fe:16:5d:18:
c5:88:e5:4a:a2:ab:5a:ca:cb:51:cc:67:9c:a9:0c:7f:03:be:
e6:a4:37:0d:71:6f:18:e1:f6:be:08:f3:8f:61:d2:fc:41:33:
44:c0:ed:f8:f6:50:d5:7a:58:74:46:a9:ee:a4:dd:24:a4:93:
d9:82:f2:77:7f:73:75:08:a1:0e:69:1e:28:13:07:04:44:c8:
62:14:29:6c:22:74:61:6d:e8:82:ea:b2:f4:23:d9:c0:70:e1:
64:70:c1:fb:fb:81:b4:8c:c0:07:76:68:f1:36:33:38:eb:21:
8c:95:fa:ac:5f:aa:91:da:d0:ac:fd:52:c9:4a:ac:99:ba:24:
4a:3f:6a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:06 2025 by rpki-client