Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier: qjWqlIo2izGBkc7wmIObg2wmp4etZKkoBGOjfvCx8ac=
Subject key identifier: 53:EF:BF:E8:60:AD:8C:20:6A:11:CD:BB:45:F4:6F:31:3A:8F:7B:31
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019A4F98F24AC0537220906F66F85330069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number: 11D8
Signing time: Tue 04 Nov 2025 16:00:14 +0000
Manifest this update: Tue 04 Nov 2025 16:00:14 +0000
Manifest next update: Wed 05 Nov 2025 16:00:14 +0000
Files and hashes: 1: 0mjmbcUYcJdUwsZqfFXQurt0QGs.roa (hash: vj/D2huTe28PQZ9MOq6LRDgSeNcaiaat155ny9UZvt0=)
2: 5JznkOHDsnezLypnW6QUHIz_JqI.roa (hash: uAlkr8hXMWL34v9FNVsgW8wHLyGgQu70yPukhjP+1nM=)
3: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: RJiAUwnKv6HxJ8UDU9+rJd4/oC0rYVX3afZ7bq/8Y+s=)
4: T94PGq-eWjYniItYGztzb3OiEUY.roa (hash: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f2:4a:c0:53:72:20:90:6f:66:f8:53:30:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Nov 4 16:00:14 2025 GMT
Not After : Nov 5 16:00:14 2025 GMT
Subject: CN=53efbfe860ad8c206a11cdbb45f46f313a8f7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:ac:b7:54:14:1f:b2:33:78:55:d6:1e:0d:
73:b7:fe:ef:28:2c:d4:ca:e7:83:58:58:28:5c:af:
76:23:cb:d9:4c:25:db:5c:46:b9:26:e3:6a:3b:8c:
2c:e9:af:02:cf:51:fa:35:7f:35:fb:f9:30:55:0e:
db:ee:5d:e0:18:c4:2c:c1:02:ee:54:9a:e0:07:74:
9d:68:2c:10:b0:1c:92:e3:fa:69:ca:10:9c:25:06:
0a:e8:c3:8c:d3:ac:31:4d:33:f8:78:f8:49:4b:d2:
d6:8c:23:fa:3f:78:e5:df:33:ad:d5:21:ac:9e:92:
e8:7d:87:4b:ce:a6:b1:80:79:a1:80:4b:9c:be:c2:
0e:8b:49:15:8b:3d:9d:c1:e0:ee:7c:8d:20:72:fd:
5a:cf:fe:95:61:71:d0:45:8e:5f:ef:9e:1e:cb:b6:
8c:36:e1:7f:76:37:cb:2b:93:af:99:b4:27:b9:8e:
19:7a:de:fa:6f:0d:f7:e3:cc:64:ef:e6:64:46:74:
84:dc:1c:e7:ef:e2:6d:25:2e:91:00:b4:17:77:4e:
04:3c:6d:76:a4:6d:6a:a4:12:4e:db:c7:c3:24:54:
3c:24:97:d8:17:a8:0d:4c:de:70:da:eb:de:06:ec:
1c:f1:7d:98:1b:6f:12:24:6c:6b:2e:78:c0:1e:45:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:BF:E8:60:AD:8C:20:6A:11:CD:BB:45:F4:6F:31:3A:8F:7B:31
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:00:07:ba:58:af:56:b8:06:c8:63:1d:9b:3e:e0:1d:9d:82:
93:cd:25:2f:28:2e:a5:7e:0f:77:e9:df:e0:91:99:f9:db:4b:
1a:1e:3e:44:41:6d:69:52:49:e9:d7:57:c6:98:ae:ae:e8:44:
a9:f2:3d:44:e7:7f:0f:15:af:17:1b:36:a9:55:34:37:46:1c:
61:15:1f:fb:42:83:03:4f:6d:ad:02:05:0e:e0:5e:65:61:44:
4d:be:dd:96:c4:e3:88:74:9f:f8:0c:e3:6e:17:57:3b:f9:3a:
99:6e:16:13:be:9c:8a:6d:f7:bd:53:da:6a:62:6e:3a:0f:a8:
ea:10:77:de:8f:c3:a1:db:45:5e:7f:d0:da:8b:c0:05:14:c5:
f6:b5:63:2e:a1:65:21:1f:41:f0:8f:e9:e2:d0:53:b6:d5:60:
77:db:99:04:d2:98:ec:33:e5:c3:f9:ff:c9:92:b3:6c:bd:4a:
82:dc:d1:89:f8:38:9d:70:e2:0a:66:74:d4:c4:d9:cf:c4:46:
df:56:a5:b2:df:f1:24:e2:15:dc:c0:22:74:b2:3f:1e:94:4f:
d5:4a:4e:1c:32:2c:71:6a:62:71:f0:1f:3c:74:8a:85:14:dc:
09:f4:fd:2a:51:f8:c6:2e:6f:5c:b2:ee:7f:6b:2a:94:9f:1b:
c5:66:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:51 2025 by rpki-client