Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: rMRTGgLQSzmb2VrZDZp2gzyK1VruJRvxaUi2JH4rjDA=
Subject key identifier: CF:15:91:7D:CD:17:56:77:98:BC:AA:23:CC:81:51:3A:3F:10:F0:4F
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019A251CE39149D39344917E5DD952CF4352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 10:00:41 +0000
Manifest this update: Mon 27 Oct 2025 10:00:41 +0000
Manifest next update: Tue 28 Oct 2025 10:00:41 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: l0ZXGhdjoY2e4Idf/8fsmlHGQhGVI34IoSdHlk97Xl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:e3:91:49:d3:93:44:91:7e:5d:d9:52:cf:43:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Oct 27 10:00:41 2025 GMT
Not After : Oct 28 10:00:41 2025 GMT
Subject: CN=cf15917dcd17567798bcaa23cc81513a3f10f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:2a:97:24:cb:e3:7c:21:a6:b2:d0:69:1b:
b6:18:54:f2:8c:61:16:97:f7:4b:0c:0e:19:c0:15:
4e:4e:13:f1:a4:01:f3:3b:96:57:f2:86:81:50:32:
aa:69:89:18:9b:82:28:59:0a:51:fc:ee:d4:b3:03:
a6:7b:38:03:e4:a9:bf:f0:ea:ac:14:76:7d:ff:a5:
cf:4a:8e:6b:5c:31:65:70:97:92:a4:f6:fa:4e:b2:
d7:8d:ab:79:d8:6e:31:ec:43:62:ab:c8:23:c4:fb:
7f:c6:a8:97:6e:fb:64:d9:6a:8f:b1:b1:0b:4f:59:
d7:a0:c7:f8:ee:0b:75:d0:6f:c7:e9:d2:06:60:21:
5d:21:b8:f6:2c:7f:ee:bd:dd:00:e3:2f:64:00:b6:
ef:7b:a1:b7:fe:08:d8:bd:20:f4:fc:6d:34:1d:f0:
d5:1c:86:0e:3b:8f:15:fe:67:95:27:9a:dc:e4:3f:
11:4f:4d:ba:a5:8e:5b:57:35:e1:1e:90:35:e9:cf:
e5:58:a2:60:3f:50:2e:28:77:76:24:69:9a:16:da:
3f:82:28:7f:cb:d0:e3:a1:fc:16:d1:0e:9b:e6:6a:
ab:8c:20:db:7b:4a:44:fc:8b:0f:ae:1a:ae:b2:0d:
72:55:5d:8c:40:9f:b9:f3:a6:9d:55:91:35:e3:f0:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:91:7D:CD:17:56:77:98:BC:AA:23:CC:81:51:3A:3F:10:F0:4F
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2f:c6:71:40:72:4f:17:62:d2:82:ff:4f:46:dd:d2:b6:1d:
8c:d2:ba:ef:80:33:7c:79:41:ce:22:ea:24:72:df:e9:22:af:
12:ad:16:d1:87:a4:3f:db:30:b0:0b:9a:19:56:a2:ab:8a:ca:
86:91:b2:1a:b2:b2:a1:fd:2e:55:52:9c:42:de:79:39:33:15:
97:db:4f:d6:a9:05:dc:ed:df:d3:7d:27:ec:ef:41:42:9d:fe:
8d:65:e6:fe:da:46:5f:24:fe:c8:40:f8:74:bb:87:88:bd:ac:
cb:d3:f4:b6:d8:df:c6:ad:f4:d9:12:0e:f0:96:20:73:2d:5a:
34:e6:5e:15:65:18:59:0c:d1:cc:83:b8:42:dc:14:38:af:5f:
17:43:3d:ea:a7:f8:3f:22:47:e5:49:1d:f4:a9:8f:f8:69:cd:
e6:62:02:67:60:bb:fa:ef:44:9c:41:b2:a4:c9:49:05:9d:90:
b6:4f:1c:c4:2d:aa:1d:f6:1f:d0:7c:35:54:0a:f8:96:74:7b:
49:bb:86:94:0f:b6:a4:67:58:5b:05:81:02:e5:66:78:c2:9e:
82:0a:8c:f7:ac:cc:ec:87:bc:fc:27:3d:90:2b:b9:e8:65:15:
54:e7:c0:a6:c7:52:d5:18:d9:27:93:44:c9:d2:8e:c9:46:11:
f8:2a:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:19 2025 by rpki-client