Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: Yg4nC4cIljsbAFglOxXmkOrmeRdfMHSNHRp/c9ov/eI=
Subject key identifier: 10:5E:59:24:8C:A9:C6:13:EA:08:53:0F:EA:6B:A6:C1:15:4E:8D:E2
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019A251CDF8C2EAA5EB68015674A6DF47CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 16FE
Signing time: Mon 27 Oct 2025 10:00:40 +0000
Manifest this update: Mon 27 Oct 2025 10:00:40 +0000
Manifest next update: Tue 28 Oct 2025 10:00:40 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: OUbjdtxw8RBy6S2nw5vFMSk/WSGUTAK5JBfa4RtaaR8=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:df:8c:2e:aa:5e:b6:80:15:67:4a:6d:f4:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Oct 27 10:00:40 2025 GMT
Not After : Oct 28 10:00:40 2025 GMT
Subject: CN=105e59248ca9c613ea08530fea6ba6c1154e8de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:3d:97:a9:fe:e0:e5:df:6b:06:02:b0:22:
e5:64:5f:57:8e:d5:14:c8:1f:25:e4:c6:6a:35:18:
be:e5:f0:76:6c:73:c0:d5:66:99:93:41:4d:4c:ef:
cc:a3:fc:98:24:d0:0e:25:0c:8d:7f:c1:d0:cf:04:
c2:fe:d4:b2:df:6f:93:0d:fd:f3:f6:bc:d4:44:fe:
9c:65:5b:4e:fb:03:cc:d4:1a:7c:35:ea:d0:0b:ce:
83:29:7c:33:1b:80:79:56:22:83:66:ed:83:d4:5a:
41:ae:a5:2f:38:01:44:97:85:f5:3f:91:c0:02:23:
f8:f8:6d:e8:3d:1a:ff:1e:2c:8b:00:33:66:4d:9f:
bf:2b:e1:d7:f3:14:8d:5d:a3:64:3f:9e:ca:ae:0b:
77:d8:59:1f:e2:8a:35:fd:3a:6e:10:ff:50:6c:29:
99:88:21:57:61:d4:dd:83:b4:3e:77:64:47:a6:4b:
ee:ec:a3:f8:0a:2b:84:da:9b:1e:f1:59:5a:b1:c3:
0a:83:c5:43:fb:f5:fb:e3:f7:b2:ad:64:32:02:1c:
3e:2c:c1:62:36:d0:a1:41:31:d6:91:ab:64:49:25:
39:89:8f:12:12:20:6a:15:a2:7f:e0:d3:b5:a4:16:
e7:64:eb:d1:ac:e7:9d:e5:40:84:ae:0f:98:e3:7f:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:59:24:8C:A9:C6:13:EA:08:53:0F:EA:6B:A6:C1:15:4E:8D:E2
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:b9:ed:8d:02:0d:36:92:ba:2e:09:ec:3b:06:3e:2e:6b:
49:55:18:ec:3c:ea:83:b7:e5:44:31:ed:a1:86:0e:b3:db:92:
b4:36:2f:c5:ac:7f:1e:9e:64:d9:1e:03:4e:d6:1d:2d:e5:73:
6f:0a:d4:c4:86:c2:16:ce:22:af:3f:70:cc:60:88:4b:be:c3:
09:88:20:06:5f:04:a2:5f:4c:4e:44:3d:b7:18:2e:f2:53:d7:
d7:50:7e:30:1c:83:2a:2f:6b:18:f8:0f:4a:0a:ae:7d:95:61:
09:c2:2c:3a:6a:a5:77:bb:2b:04:9d:3d:73:d6:4b:46:b8:0c:
51:93:fa:66:42:80:f1:89:62:0f:a9:65:4d:f1:fc:21:3e:25:
d0:fc:41:27:83:3b:f6:74:d7:79:2b:f4:05:22:f7:7e:93:7c:
84:79:1c:2d:80:cf:95:82:1c:14:d7:4c:74:e7:05:02:e2:97:
31:ea:88:b3:a5:7f:a8:15:f0:0c:df:1d:7e:6a:d6:2a:b1:c8:
97:31:ba:f6:92:11:7c:a0:76:fc:d1:bf:cc:05:f5:6d:81:0d:
00:77:9c:40:74:d1:2b:5e:35:36:94:09:48:38:02:a4:80:13:
e8:ae:4a:9a:8e:09:4e:e1:53:06:96:d4:06:73:e9:63:a7:1d:
a5:12:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:02 2025 by rpki-client