Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: FJSP1nZ3N95oWyQJO8uYZulHE6C8ndvVcqXgG8/3zXg=
Subject key identifier: 15:C3:3A:47:D4:E0:DD:F9:67:2D:F8:90:54:3B:A8:16:2B:C5:BD:0D
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019A52D12F52A1A58E1400BF7D8C5F912B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 0604
Signing time: Wed 05 Nov 2025 07:00:32 +0000
Manifest this update: Wed 05 Nov 2025 07:00:32 +0000
Manifest next update: Thu 06 Nov 2025 07:00:32 +0000
Files and hashes: 1: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (hash: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: Muqaa70lwxKdAWBTA2lhCH+Pnr5Le36OsGbDPVcroYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:2f:52:a1:a5:8e:14:00:bf:7d:8c:5f:91:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Nov 5 07:00:32 2025 GMT
Not After : Nov 6 07:00:32 2025 GMT
Subject: CN=15c33a47d4e0ddf9672df890543ba8162bc5bd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:f5:a7:7b:69:88:a4:48:cd:51:c1:0a:80:
24:96:4c:b9:28:a3:85:d4:a8:ac:c1:57:f0:40:d7:
f8:97:63:23:74:bf:2e:0c:ca:f2:9e:65:b3:0c:dd:
02:c6:60:79:2d:ad:58:b2:8c:b5:71:98:3b:8b:4b:
32:2f:67:62:08:fc:1d:f7:63:dd:19:ed:d1:71:fc:
13:cb:29:e3:cf:47:41:2f:8b:66:7c:14:4c:6b:42:
1c:68:8c:b5:20:fb:35:a9:ca:18:b9:f2:bc:a1:26:
55:44:43:b6:c1:60:5b:f6:d4:6e:4f:3d:56:7e:ef:
87:8e:d6:a0:d6:30:83:cc:37:e6:17:38:21:e0:90:
95:c4:b4:6a:18:e9:f2:06:dc:e7:1c:c4:1d:ce:6c:
6c:86:70:f5:e0:9b:11:6a:b3:48:88:04:8b:d2:58:
a2:b6:16:e9:44:57:34:21:7e:5c:34:14:79:58:4f:
6c:34:fe:e2:ff:45:b0:56:6f:cf:5c:34:2d:e7:e7:
72:5d:2b:6a:23:83:4d:07:e5:f1:bb:51:70:30:4a:
36:63:4a:41:41:b5:32:b5:d4:69:2e:e8:f5:33:d3:
d2:5c:b9:68:72:3d:26:33:3e:84:23:a1:6c:ce:c0:
59:fb:91:19:cd:fa:c3:66:ed:9a:4a:86:2d:7b:f7:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:3A:47:D4:E0:DD:F9:67:2D:F8:90:54:3B:A8:16:2B:C5:BD:0D
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:d8:8f:36:8d:61:79:c7:46:7f:eb:04:6b:da:19:c8:72:
a0:87:a6:53:52:b0:1a:d2:4e:34:d6:79:7e:b8:c6:77:a6:ad:
d8:fa:34:a1:43:94:7b:10:ae:09:5f:3b:ff:cb:10:57:7c:39:
2a:61:0c:1e:ef:fe:16:d8:11:dc:04:f5:f0:fa:0b:eb:48:c7:
eb:4e:87:41:b0:00:5c:2c:b0:77:ec:84:1d:85:e8:96:2d:1b:
44:eb:97:59:8f:dc:81:48:6e:37:70:b9:05:5f:50:fd:a2:db:
e0:83:f3:23:99:37:67:ed:2a:95:8b:b8:ff:55:51:83:6d:ae:
27:45:f6:d5:57:2e:5a:a9:ac:46:ca:da:9d:48:39:5a:6c:25:
4f:00:34:e6:99:07:cf:d1:29:4d:5a:81:04:e8:60:e9:07:65:
82:91:dc:07:4f:ab:ac:af:80:2f:a9:49:f2:a4:68:28:1e:91:
b4:4e:96:d9:47:55:b0:fc:90:c2:1d:2c:18:ea:85:48:c8:5d:
a9:80:f5:4a:cc:18:fc:5f:10:4e:be:5e:b4:ab:1a:5a:57:9a:
79:db:f7:de:01:ba:08:3c:fe:89:35:d1:31:c0:1d:a2:ee:84:
a7:a0:6f:6a:f5:8c:ce:2c:e4:9f:7d:80:2e:dd:48:dc:a6:20:
6a:2c:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:47 2025 by rpki-client