Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: 8dAIs8kkFnG3GaQJBycJWNcvDK0PGQhMJjO+LTF4hhg=
Subject key identifier: E5:22:43:C8:23:CA:EF:44:2B:76:80:7A:F2:F4:BF:81:7E:94:B3:A5
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 019A4E18733BDB960C4C2D19098882461D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 088F
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: YUJhVzkZ90aIPGJNAYBeTMca0y5P79QFH/Th4aaPaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:73:3b:db:96:0c:4c:2d:19:09:88:82:46:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=e52243c823caef442b76807af2f4bf817e94b3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:69:06:08:57:57:9d:5c:57:a1:57:4d:91:
d1:8d:e2:ae:00:32:8c:b6:e8:76:5b:58:29:ba:61:
ce:56:b5:fe:e5:4c:57:04:cc:33:32:3d:08:a5:42:
0d:a5:53:ef:4f:c3:9d:00:2a:cb:fd:83:c0:74:db:
fd:c7:0b:1d:c6:c1:83:db:65:51:16:e7:64:c6:6a:
91:21:b0:19:09:5e:db:a9:d0:2f:12:a5:42:f3:15:
7c:f0:04:04:c7:8a:fa:b7:e1:cd:20:d2:5c:34:4f:
77:4c:8f:ee:4f:eb:37:53:23:97:b1:2d:17:a6:71:
ad:ca:3c:49:c5:32:28:ed:64:c4:8d:72:ae:0f:d9:
98:bf:04:56:56:36:de:b8:9d:fd:2d:8f:0e:d7:6c:
d4:7d:6b:6c:d2:26:77:4f:7b:e0:71:e5:2d:b4:89:
d3:db:96:00:ec:20:ce:ac:0f:6f:21:fb:a7:35:31:
9d:d6:76:02:2c:5e:f1:c2:10:b4:6b:77:56:4d:51:
1e:7d:d7:af:fd:9e:93:ca:04:3f:8b:8e:93:e4:fe:
4d:a4:29:f6:23:bc:8a:ba:65:fd:1c:e9:4d:76:63:
da:c4:53:ab:6f:f9:fd:e8:63:2c:f0:80:e4:f1:c4:
0d:45:02:2f:f4:9b:78:b5:16:ab:76:c0:db:25:79:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:43:C8:23:CA:EF:44:2B:76:80:7A:F2:F4:BF:81:7E:94:B3:A5
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:b8:14:0b:67:28:73:8d:9b:b0:f8:1f:d9:ed:a3:a6:71:
03:40:80:92:c1:51:be:9a:37:66:f1:b7:3d:49:3f:8c:d4:d0:
d8:46:23:5f:dd:5a:09:1f:82:4e:f7:55:54:bf:85:b2:f7:79:
99:48:2b:25:64:20:db:31:37:f1:b3:b0:8a:fb:e6:6e:e4:fd:
8d:78:e1:05:9f:dd:25:6e:6a:76:20:3c:67:ec:c7:b0:15:2b:
be:6d:d5:0f:a3:10:ba:71:5a:0e:86:dd:87:4d:2e:f5:ba:45:
5d:c1:b4:2e:20:6e:1a:63:30:84:d9:17:77:24:d6:79:ed:3e:
58:7a:63:3c:5a:e8:c1:ab:f6:75:69:fe:5a:79:ca:cc:c9:de:
91:d8:6b:aa:cf:21:84:0c:9c:5d:3e:30:a6:36:c8:a2:88:4d:
2e:4a:17:43:22:38:42:00:f8:ac:1f:ff:36:05:43:c3:08:0c:
45:32:76:73:2f:02:15:5d:56:a6:65:bb:f7:a5:25:e0:3e:c5:
bb:b7:75:bb:20:07:61:97:e0:21:0a:42:04:55:35:1f:2b:1a:
34:42:9e:cf:4c:8e:7d:31:ff:1a:27:6e:aa:b0:8c:67:09:aa:
31:b7:47:2b:15:3a:3d:53:9f:0a:aa:22:a7:db:24:13:23:be:
89:e4:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:38 2025 by rpki-client