Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: ODJWbrYp9uSU/8DyNfPE2yAVnl7ALDHHJCtrvEBl5ik=
Subject key identifier: 73:EA:A3:7D:F1:BF:A0:E6:FB:59:8C:35:63:33:7A:A9:64:92:67:10
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019A5375E56C4A1F715B8C38E601EB530516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 10:00:26 +0000
Manifest this update: Wed 05 Nov 2025 10:00:26 +0000
Manifest next update: Thu 06 Nov 2025 10:00:26 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: HWWqsCS78QSviBNlqk1JCjpG1sMxd9t9ZH75hxwK4Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e5:6c:4a:1f:71:5b:8c:38:e6:01:eb:53:05:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Nov 5 10:00:26 2025 GMT
Not After : Nov 6 10:00:26 2025 GMT
Subject: CN=73eaa37df1bfa0e6fb598c3563337aa964926710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:35:5a:67:96:05:a6:7a:0a:5b:be:93:68:
1d:c2:99:e1:ce:6f:b5:ba:6c:aa:e0:4f:5a:90:15:
5e:4f:4d:a6:e0:e8:29:9b:3a:f7:d6:ff:16:e6:b3:
a2:40:83:5b:9e:01:1c:a3:a5:bd:49:4e:e4:a7:81:
d2:28:a9:ed:84:5c:67:cc:d1:cd:0f:c2:ba:61:c7:
a2:80:29:63:36:e6:d1:07:93:68:a9:15:4e:f6:9b:
1c:43:64:ee:46:68:60:98:99:74:c1:b8:47:0c:52:
28:64:24:c2:e9:38:02:f4:2a:16:49:3b:ab:4f:fa:
a9:0a:fe:63:f6:9f:00:7b:f8:dc:d7:13:8e:9b:51:
f5:7c:6c:24:c6:02:99:0a:d1:02:3c:96:d2:f3:e8:
fa:45:5f:39:4f:db:8c:77:6c:c4:a8:4e:c9:27:59:
cf:03:da:84:52:24:05:3a:58:35:67:3b:b6:6a:37:
dc:2a:ea:ca:be:f5:66:b3:10:5d:2b:87:f4:70:95:
43:dc:7e:f3:92:f5:e1:75:44:f9:76:08:64:70:95:
09:a1:91:d7:48:96:81:9d:d7:68:10:3c:a4:4d:c4:
d3:82:1f:96:cb:51:7a:90:6c:28:0b:46:f5:aa:a7:
b9:3d:71:09:75:96:2b:45:35:8f:8c:64:31:66:0f:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:A3:7D:F1:BF:A0:E6:FB:59:8C:35:63:33:7A:A9:64:92:67:10
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:1e:72:20:22:b7:9c:52:88:ff:71:1f:72:3d:0b:26:23:
0b:c3:f4:74:d7:dc:56:44:41:9a:e0:7a:12:f2:06:0f:23:e7:
b5:fd:f1:c7:b8:49:ee:6f:5e:a6:ca:4e:10:ff:35:75:2b:e0:
94:f1:41:32:3e:2b:f1:27:76:4b:64:81:19:5f:e0:13:f2:04:
a6:ff:73:e3:dc:f1:28:ce:8b:64:9f:e6:fc:23:c5:4d:92:0d:
3f:10:db:47:ab:28:d4:9f:85:20:e5:6b:4a:4d:bb:c4:e0:b5:
48:ae:c2:7e:f6:85:ae:5c:77:df:2b:19:a0:7b:51:78:e5:eb:
1e:c7:c1:5f:7e:5e:d1:81:f4:7b:ad:8e:58:f7:84:2c:16:29:
34:9e:86:87:cd:dc:01:f8:bd:01:38:f6:7f:8a:57:7d:e3:db:
41:97:50:91:bf:6b:c9:f5:68:b1:8b:c2:44:ac:c0:63:ff:5f:
a1:c6:3f:cf:f1:9a:f2:a1:c3:35:ea:ea:85:bf:db:da:d9:35:
e8:11:3c:63:af:7c:cb:ec:7f:87:aa:28:3e:82:b3:bb:d9:40:
e9:f7:1b:0c:ed:ee:c3:7f:a9:ed:6b:2f:92:9f:fe:f8:7c:c2:
5f:09:1f:92:8b:93:57:5c:4c:7e:52:9e:6d:e2:d9:b6:a6:fa:
3d:b1:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:42 2025 by rpki-client