Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: 1qJpbW/ljGB9bcwyq7JaVqwmqtHpvXrqSGjMjPmC9CY=
Subject key identifier: 1E:64:EF:79:9D:91:6E:31:11:08:91:B4:39:9D:D2:66:4E:76:50:6D
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019A4D06E3BB8CDBDDEA61E93E66ED4D595A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 04:01:28 +0000
Manifest this update: Tue 04 Nov 2025 04:01:28 +0000
Manifest next update: Wed 05 Nov 2025 04:01:28 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: T+zo8AhLJJ3ZBJV0/cuFUIlWA1btLCUVy9Kz7SQ0uVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e3:bb:8c:db:dd:ea:61:e9:3e:66:ed:4d:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Nov 4 04:01:28 2025 GMT
Not After : Nov 5 04:01:28 2025 GMT
Subject: CN=1e64ef799d916e31110891b4399dd2664e76506d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:60:64:08:9f:ae:ac:10:30:eb:20:54:ea:
44:f0:72:fd:b3:be:3d:3c:71:de:cf:0e:77:9a:84:
66:3a:77:49:70:3a:f4:5a:34:b7:cf:32:83:f3:a9:
4f:6c:e3:bd:a3:42:b0:e6:63:55:50:42:04:cf:32:
7f:5d:99:95:fb:9b:02:68:1b:cd:5c:41:d4:df:3d:
e2:10:4a:f8:3a:a7:97:68:61:a4:cb:a4:f3:a9:84:
fe:55:90:82:43:fe:e4:4e:06:0f:67:69:5f:b3:1a:
e9:37:42:a7:eb:39:4f:ea:7c:3a:c8:a3:4f:c7:4f:
cc:48:44:9d:38:2c:41:b6:e8:93:f1:31:95:1b:88:
43:69:ce:0b:53:2a:61:c4:9d:b0:65:e4:1e:a0:80:
5b:8a:76:8f:90:24:46:ec:c0:cd:5f:0e:f0:a5:9c:
bb:47:6e:10:b2:eb:5d:97:76:f0:6d:86:8c:32:7a:
98:4c:5d:f6:b6:d3:a0:32:9b:e5:35:62:a1:fa:7f:
0d:fc:28:1c:90:8a:90:63:72:7f:3a:ea:47:32:4c:
47:65:1e:e6:db:a6:d4:5f:da:ab:ab:cf:b9:50:d5:
91:77:fb:cf:2f:3e:55:63:a3:ca:fc:95:a8:08:19:
51:5b:55:9f:e0:65:32:dc:bc:71:d5:d0:af:45:95:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:EF:79:9D:91:6E:31:11:08:91:B4:39:9D:D2:66:4E:76:50:6D
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7d:28:da:0d:7f:e9:68:96:fc:42:ba:1b:7e:95:02:2f:b3:
aa:04:ee:1b:55:46:e7:07:90:4c:29:f3:0f:1c:f8:76:32:8b:
22:bc:87:b3:2e:05:06:60:e1:7b:bb:f3:3e:a3:ec:cc:23:fe:
98:2c:09:42:8a:1e:46:08:65:4b:42:31:5e:96:a9:46:09:62:
e9:4e:85:a1:53:a5:06:b3:ad:55:3e:7a:94:97:74:63:83:3e:
ce:eb:4c:f4:a2:41:1e:e0:4e:66:5f:94:53:14:16:5b:ba:f1:
3d:c0:a4:bc:38:7c:97:ea:cc:55:e0:c4:0e:aa:3c:05:64:1d:
d2:89:c7:01:2d:9a:34:62:d6:04:71:12:7e:88:67:30:27:06:
1d:37:dd:9d:2d:df:9b:3f:25:2d:51:d3:20:f8:98:4a:a6:eb:
3f:b9:1e:99:6e:bb:9f:eb:d0:e8:51:7e:4c:03:50:3c:d7:10:
70:3d:c2:c1:8b:7f:81:7b:1b:25:82:d9:f6:51:40:14:3e:a9:
dd:bd:0e:c0:a3:03:dd:42:bf:10:ae:97:6a:e7:ac:de:f9:a9:
4a:86:41:09:e9:84:ec:37:bd:38:09:55:f8:1b:59:af:22:a2:
72:df:17:f7:e7:b5:ce:a0:65:5c:de:ab:78:2c:6e:51:07:ba:
3a:98:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client