Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: 1sOeNTcEAweokZFz782vIcz+du2TggGRCJ3V5r1u8HE=
Subject key identifier: E2:77:6C:07:1A:FD:5E:57:A9:2F:CF:B0:A7:1E:07:C3:1E:28:6B:14
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019A236586D12022FA6BFDE2E2B81CB1E25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 02:00:47 +0000
Manifest this update: Mon 27 Oct 2025 02:00:47 +0000
Manifest next update: Tue 28 Oct 2025 02:00:47 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: QWNGO1ZmSfUUKgnbX6Q+DIAN5ai1tqwn/Z/fgA/9heo=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:86:d1:20:22:fa:6b:fd:e2:e2:b8:1c:b1:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Oct 27 02:00:47 2025 GMT
Not After : Oct 28 02:00:47 2025 GMT
Subject: CN=e2776c071afd5e57a92fcfb0a71e07c31e286b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:cf:b7:4e:21:cf:9b:32:66:a5:a6:2e:bc:
a2:89:d1:57:54:69:1c:e7:9b:93:be:78:6c:12:ec:
07:62:45:c9:fe:07:58:34:3a:51:ae:c0:5c:88:40:
fa:a8:d2:00:fa:2b:00:ef:6c:28:b6:4d:dc:d6:ae:
a1:64:6f:3f:a9:9c:33:b4:97:cc:cb:39:c7:04:45:
b3:68:a8:53:7f:fd:89:18:6a:de:c7:a0:91:c4:d7:
a1:75:a3:8e:0d:b4:b8:79:88:31:0c:f1:f1:13:7f:
20:2c:b2:f8:c8:fb:a8:44:c1:3e:4e:f8:ca:92:5a:
46:36:a7:e0:7a:f2:5f:71:b0:ad:9d:90:39:99:ff:
4e:f4:7a:e7:c1:86:9f:5e:a7:d8:ed:6c:cb:fb:dd:
f5:08:1b:b5:5a:f8:bc:a2:4e:24:56:d3:a1:bc:ec:
e7:68:9f:82:b3:56:29:6b:8d:c2:32:18:b6:ea:f2:
3b:c6:01:cd:3b:19:a9:a4:4a:8f:99:c3:58:52:db:
d3:4f:85:91:df:25:c0:7f:03:27:f3:26:e5:45:d8:
77:b0:dc:37:71:fc:5e:7f:a9:d4:aa:39:97:2d:00:
e2:f4:a3:56:cd:ee:45:48:ee:7c:d7:5d:a0:86:84:
9b:d4:c5:7d:9a:9c:95:ed:f7:61:c7:6e:2f:b5:51:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:6C:07:1A:FD:5E:57:A9:2F:CF:B0:A7:1E:07:C3:1E:28:6B:14
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:2a:0f:c7:8d:74:bb:49:4b:1c:16:d8:46:b4:8b:df:1b:
5e:9f:0f:15:d3:bb:4d:8f:6f:6a:ca:6c:b8:9a:3c:67:3e:9a:
b0:cc:7a:57:99:17:9f:a5:6e:59:32:3d:84:0b:82:8c:65:d7:
5d:d5:4f:cf:78:a1:bb:e6:2a:28:2c:b2:b0:56:de:64:12:9d:
0c:44:ca:0f:75:fd:b0:f5:3b:6a:ea:fa:83:5f:45:f5:3b:e3:
1d:41:24:02:4e:56:6a:8b:48:b7:62:66:ac:99:20:3f:de:6a:
25:c1:6c:d8:64:8b:70:52:c4:0c:ee:e9:8e:44:5b:8e:92:21:
22:cc:36:d6:d0:03:af:ad:fd:4b:08:d9:8b:45:76:13:fa:9e:
5c:07:56:16:d4:fb:18:12:67:95:05:96:e3:48:38:97:31:0b:
05:aa:37:03:f6:c8:83:da:2a:f4:a4:62:40:64:ae:95:bb:de:
58:68:46:92:48:12:e1:35:2d:48:bd:45:68:9c:ad:b2:9e:6c:
b2:a3:7c:5f:ce:eb:dc:10:7c:a9:77:56:4e:57:82:cc:2c:82:
8a:e7:98:67:e9:3e:46:b7:72:b3:c5:66:92:52:5a:6d:d7:66:
6e:ac:74:01:d2:17:39:45:62:2d:9d:71:4b:32:d8:56:25:ba:
7b:60:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:16 2025 by rpki-client