Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: RcZ+jRgMuqH6dTq9OrBlx2bSwPFEH3uAh4EiMIFTOxk=
Subject key identifier: 29:B6:8C:16:B7:CE:6E:32:09:27:81:2F:6E:C6:21:A5:53:9E:98:10
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 019A2D43EAFF5E7722A4F66C39A7DFDD7388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 16CC
Signing time: Wed 29 Oct 2025 00:00:16 +0000
Manifest this update: Wed 29 Oct 2025 00:00:16 +0000
Manifest next update: Thu 30 Oct 2025 00:00:16 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: vAj8VPtMVbTpGjaKzfaZtSdi8w1iBmC4YMdOhytpJGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:ea:ff:5e:77:22:a4:f6:6c:39:a7:df:dd:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Oct 29 00:00:16 2025 GMT
Not After : Oct 30 00:00:16 2025 GMT
Subject: CN=29b68c16b7ce6e320927812f6ec621a5539e9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:13:4a:40:1f:63:84:03:50:bc:eb:57:cf:
e5:ed:da:33:7e:62:40:11:29:72:c6:37:da:a5:76:
9b:18:49:eb:ae:9e:18:40:50:af:42:0e:cd:c0:6e:
86:0e:3b:f6:d0:eb:4c:0e:e6:87:72:20:24:a4:31:
eb:4e:2c:fe:18:00:00:3b:c3:bd:aa:67:b0:41:2a:
f5:cb:5f:c8:06:a1:d3:18:da:fc:5a:ec:cc:8a:47:
1f:3f:a8:f9:3c:6f:3e:a1:a4:cc:fc:6d:90:dc:41:
ad:de:74:ef:48:c8:b0:2f:8f:fd:58:66:39:ad:49:
64:68:69:1f:c6:53:ae:d0:70:cc:9f:85:bf:3f:09:
6d:e7:01:5e:59:34:5b:b0:65:0e:d8:38:76:f9:c5:
1f:28:cc:d3:28:69:19:7d:1c:a2:b1:71:83:13:9e:
fd:5b:69:4a:c4:d3:10:65:17:e5:e6:cc:ad:0a:c4:
0d:fc:69:ea:ed:a7:70:08:ac:98:ad:04:d8:db:73:
03:c2:1b:8a:c6:2d:89:47:b7:30:f3:69:8e:ef:d5:
ec:b0:65:ff:0f:f9:f2:38:83:37:8f:d2:9d:24:ef:
f9:2f:4d:2c:f1:cd:1e:f6:1b:dd:52:11:e3:be:4a:
35:c5:05:1a:0c:d9:01:1d:b8:39:f4:ea:92:40:ae:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:8C:16:B7:CE:6E:32:09:27:81:2F:6E:C6:21:A5:53:9E:98:10
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:41:78:d0:bc:61:bd:ee:61:51:b7:70:6a:a9:6b:af:c5:
2e:cf:55:09:a3:ee:48:b8:ae:fa:8e:82:aa:e4:8f:af:3d:16:
e1:41:2e:22:1d:ba:5b:97:54:f4:12:36:97:50:da:39:fe:55:
cc:15:43:d5:22:02:ec:24:7e:04:1a:c7:cd:f1:30:89:b0:52:
c0:c9:07:bb:72:3e:f7:e2:31:60:57:7c:c3:43:35:4c:1d:40:
55:f6:c0:7b:ef:ff:46:97:2f:70:dc:0f:ff:ba:7c:46:96:1d:
7f:a0:bd:ef:f8:31:2b:15:05:98:0f:70:70:5c:ee:1f:c9:56:
7b:46:a9:55:76:bf:78:4a:67:1b:13:ca:1d:c3:e6:05:c6:ba:
38:6a:73:d6:cc:7e:d1:08:dc:62:fe:d8:dc:f2:fe:f9:4e:f8:
24:07:e9:18:13:90:20:41:2c:d4:0f:50:18:6c:05:06:a0:da:
15:d4:99:ce:e7:7b:12:e8:80:bc:e0:32:4e:d4:b4:e0:c4:2e:
b3:5a:be:04:8e:db:d0:8a:41:e9:bc:83:3f:47:2d:67:cd:99:
b5:ca:5a:0d:24:27:b6:28:a4:1d:68:d7:01:2f:00:37:1d:bf:
d6:cc:1a:7a:df:2f:9d:a0:3b:78:b8:92:88:91:ca:79:f4:ab:
cc:70:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:55:34 2025 by rpki-client