Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: K0ZEfgglHgkPWVWAnzDnfwJN511lQ028m+35ByLCpxI=
Subject key identifier: FB:97:3D:E6:90:E4:9B:2F:A3:48:3E:77:2E:AB:F8:54:8F:CE:84:D7
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019A1D2C48D4A02DBC724D494D7F2C53594B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 21:00:32 +0000
Manifest this update: Sat 25 Oct 2025 21:00:32 +0000
Manifest next update: Sun 26 Oct 2025 21:00:32 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: EYsFb2aoMsOnhLMwCRPI28FnHNat30XxinFluT8aPsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:48:d4:a0:2d:bc:72:4d:49:4d:7f:2c:53:59:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Oct 25 21:00:32 2025 GMT
Not After : Oct 26 21:00:32 2025 GMT
Subject: CN=fb973de690e49b2fa3483e772eabf8548fce84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:16:c6:f4:96:30:a1:c4:12:3b:f5:ff:71:
b0:6a:f4:95:e8:36:c8:bc:c2:e0:8e:94:e9:ce:be:
8c:b0:e9:18:a9:eb:9c:4d:dc:98:41:b9:4f:44:da:
e3:65:a5:62:3d:e7:e3:7a:ba:b8:fb:7c:96:c4:0d:
36:98:9f:a9:b9:f4:f1:9d:12:e6:f6:de:b4:46:45:
cf:2f:62:e0:ee:11:2b:e2:80:38:cf:2e:34:c8:ba:
06:7b:76:9d:a7:cf:0d:1a:6f:e0:16:6a:7b:bf:55:
1c:4b:60:cb:97:b9:de:4f:06:9f:d6:4d:b9:55:fd:
cd:86:60:2c:52:8b:90:0d:21:f3:26:8c:e1:e1:4e:
80:0c:14:59:ae:78:23:d2:a3:4f:e5:6e:78:0c:a1:
39:fa:9b:2f:86:f8:dd:b9:f5:c1:9a:3e:dd:23:04:
c2:a5:50:6a:82:2d:76:9a:06:cd:69:2c:3b:e8:47:
60:f1:e8:0c:99:89:5a:92:cd:36:01:25:ef:d8:c5:
4f:3d:22:5c:1f:07:e6:1a:f7:ce:97:2f:77:01:13:
39:b9:fd:d6:fb:3b:81:a1:26:7e:92:3f:37:88:44:
9b:e9:d5:d4:41:b3:62:ef:ca:59:07:2f:2f:12:3b:
43:11:96:74:5b:ee:c9:91:f6:9d:30:32:93:36:ef:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:3D:E6:90:E4:9B:2F:A3:48:3E:77:2E:AB:F8:54:8F:CE:84:D7
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f2:78:57:67:a3:4c:e9:df:9f:53:0c:7b:5a:0f:b0:11:5c:
54:75:42:e6:8f:5f:4e:27:3e:6b:4b:2b:98:45:f9:90:2f:38:
d9:06:3d:f2:e9:80:75:43:48:ff:d7:66:6c:0c:c6:c0:a6:35:
8f:e4:f6:09:50:66:10:24:38:29:fe:e0:11:3e:03:b9:76:9c:
f1:4f:71:46:44:29:26:48:53:06:2f:f0:d7:d8:6b:a9:ba:15:
2f:13:76:d8:80:40:24:63:eb:c7:8d:f4:5f:f9:3c:f8:85:16:
94:da:a6:4e:c3:39:57:09:c3:71:42:d6:7c:fe:90:ba:b4:2f:
08:7f:cb:8f:dd:e3:8f:ed:8d:80:e0:53:65:78:32:97:0d:92:
60:74:4f:04:5a:54:12:d2:04:1e:ca:29:3e:be:a2:51:1f:83:
88:b5:cc:85:9b:94:88:b7:79:b9:a2:4e:b9:bc:ca:73:59:b1:
70:d0:49:dc:0a:eb:01:a3:94:7d:d5:f0:a6:f4:04:dd:d7:5c:
12:d9:7e:eb:1c:02:c9:6f:90:4b:9b:34:74:18:d3:a0:ee:0c:
96:5f:db:32:be:4d:75:c9:8e:46:7c:61:70:2c:16:b3:5b:c0:
1e:bc:0a:43:97:2f:86:6a:7b:2f:07:12:2b:e1:92:4a:35:db:
29:8e:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:19:13 2025 by rpki-client