Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: pYJ2a4SwQLOfrHigmcTpCm9iNc/wPuOBwure6pb2I5Q=
Subject key identifier: D5:1D:85:FF:8E:D2:87:AB:84:7D:A9:EE:8D:9E:2D:55:51:5B:19:49
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019A1496EA74D21DF91F2B6A49B3F727B5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 05:00:25 +0000
Manifest this update: Fri 24 Oct 2025 05:00:25 +0000
Manifest next update: Sat 25 Oct 2025 05:00:25 +0000
Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: W/Cc95bviE89PXwJcqelMF/xycz6ZfQnA5xtL9AuO0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:ea:74:d2:1d:f9:1f:2b:6a:49:b3:f7:27:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Oct 24 05:00:25 2025 GMT
Not After : Oct 25 05:00:25 2025 GMT
Subject: CN=d51d85ff8ed287ab847da9ee8d9e2d55515b1949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:45:c7:37:91:ee:14:77:5b:8a:69:76:18:
f2:3a:a2:14:6e:c6:ca:47:b9:84:db:4d:11:db:5e:
71:34:47:4d:d1:f2:c1:f9:b0:2f:d1:a1:33:c4:dc:
56:a8:cc:f8:5b:44:e6:f6:c7:12:d5:46:35:8e:7f:
42:63:cf:ff:26:f7:a0:fa:36:cb:ad:6e:c5:f1:fb:
62:80:f4:86:f6:11:35:a0:94:a8:4a:56:37:22:e5:
88:53:c1:8d:11:50:3b:1f:37:a0:db:08:6c:2c:d1:
84:1a:e6:9a:32:0a:d4:9d:93:77:a7:6d:74:72:c4:
c2:c2:f4:f7:99:4e:e7:7c:a6:2e:76:2f:e6:14:8d:
75:55:38:26:89:b5:e3:be:81:27:85:9d:fc:53:21:
47:14:bc:bd:34:e9:37:09:8c:93:f0:76:ac:1d:61:
b0:54:00:0c:52:4c:f2:65:b7:98:62:1e:9a:01:37:
cd:38:67:85:bf:84:2f:2d:7a:40:98:bf:7d:b3:18:
ee:cb:7c:6b:92:c3:30:19:66:af:21:23:cf:08:f4:
54:68:35:c2:e3:a6:8b:2a:5b:44:53:c0:1c:27:aa:
30:f3:94:64:27:2c:5f:ad:4c:25:0c:0d:dc:7f:43:
e6:87:c9:7e:07:db:53:fe:59:ea:66:32:7f:f4:e8:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:85:FF:8E:D2:87:AB:84:7D:A9:EE:8D:9E:2D:55:51:5B:19:49
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:de:45:97:a4:e8:b7:2d:a6:14:52:07:3e:93:dd:97:cb:
e2:e5:01:03:71:58:3c:3c:64:3d:83:60:fe:43:cf:3b:0c:82:
00:d5:b4:24:6d:d6:d1:84:c0:11:3e:04:c6:09:c8:60:3f:9b:
1e:55:c2:66:fa:5f:f6:9e:73:81:d9:45:3a:e9:c8:ee:26:26:
ea:58:54:db:81:32:40:3e:cb:93:9d:e4:52:72:90:47:e5:d9:
1e:c9:24:69:a8:90:ce:95:79:5c:f3:ea:32:bd:2f:eb:71:5d:
2b:8c:51:d8:cb:0a:58:25:5f:84:63:d2:34:c9:20:f2:e5:40:
2d:23:94:e6:f0:3a:30:da:ae:3d:c6:3b:b0:a7:13:8a:6e:b9:
24:0a:90:ea:2c:77:8c:ea:9e:2c:09:24:27:b6:69:ba:a6:d2:
f6:d1:01:40:fa:f7:0c:35:70:5a:9d:27:b7:e7:7d:2c:2f:e7:
b2:4d:9a:2c:4c:9b:e5:89:06:5b:3e:22:6c:b8:f6:9a:fa:36:
55:7f:f4:75:55:db:42:b4:62:75:e5:7e:d8:7c:41:30:d5:30:
36:91:c7:cd:a5:e7:0c:f7:e0:00:ee:e5:6a:80:3a:ba:90:a0:
81:2d:66:cf:5a:86:44:2e:c0:70:d9:ff:e7:e1:08:b8:de:00:
fc:25:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:40:57 2025 by rpki-client