Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: zZaiJAoQnfhb8fAV4gaNiSwe8S32RYwgWTAQkDajN54=
Subject key identifier: D3:F9:17:80:46:71:35:16:08:A0:60:44:D6:BF:18:E8:95:68:65:6C
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019A4D7402BCE58151F71858C1B8A4E3476C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0C4D
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: +nXyorKFKLoHfWrSvFAsHOVKtFn39HWcv5PnlA8bd6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:02:bc:e5:81:51:f7:18:58:c1:b8:a4:e3:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=d3f917804671351608a06044d6bf18e89568656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:fb:ad:00:39:67:76:a9:6e:5c:49:b2:55:
d1:4d:c7:3c:d4:a6:d7:de:3d:40:e8:6c:ae:75:3b:
d4:15:38:19:34:10:37:be:e4:83:d2:8a:fa:ee:42:
41:58:12:c2:8f:14:44:15:93:31:1e:c2:be:43:7e:
36:a4:36:c6:82:d6:37:7f:ed:06:55:9d:3f:6d:b2:
a3:71:67:90:76:37:82:3c:dc:90:05:3d:10:b1:7d:
d9:36:b7:f2:e9:46:43:94:9a:34:d9:9e:6a:81:fe:
ff:b6:d0:dd:1b:55:12:14:73:3e:24:f2:79:cf:59:
5f:6a:64:50:b8:0d:78:df:33:c3:7b:51:92:f0:eb:
56:2f:98:38:cc:49:e8:81:24:74:46:0b:59:a6:2b:
27:40:56:57:41:ab:4c:80:2e:02:c4:2c:ff:d6:95:
b6:84:2d:d4:fc:bd:f7:60:6b:6b:70:69:d0:77:ef:
72:c0:dc:9e:c1:51:77:b4:a6:1d:a4:de:00:2a:a2:
2c:bf:5b:47:7b:19:1b:56:b7:03:13:e6:e7:24:ff:
3c:b0:cd:9e:2d:6a:63:d7:8d:2c:e6:c2:9a:08:5c:
55:4c:59:35:0c:e4:28:e1:30:f4:b7:8a:a4:c9:6e:
b9:a5:b4:f5:57:d8:85:85:56:89:ba:c1:78:b0:bb:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:17:80:46:71:35:16:08:A0:60:44:D6:BF:18:E8:95:68:65:6C
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b6:1a:07:ae:13:60:6f:a2:5e:94:c9:bd:80:40:3e:f6:87:
f6:fa:25:06:f2:83:d0:bd:ff:35:d9:4c:4b:50:77:02:81:ad:
49:12:43:6e:d7:ff:6f:7c:aa:b5:c1:1c:fa:07:e4:9c:f4:5a:
78:cb:e9:f8:01:a0:98:ac:0f:90:24:05:7c:57:d0:9c:ee:7b:
e6:db:29:ea:68:fb:08:5a:1a:fa:26:ee:6e:7a:d0:57:a3:ca:
4e:21:13:cc:91:26:2c:8c:9a:c2:91:44:b2:6a:dc:41:34:ea:
f5:ea:d9:a6:7c:3e:5d:0c:82:db:e1:3e:9d:bd:b5:7e:6a:3d:
fc:19:ec:ad:cb:07:21:ba:13:39:35:75:c8:03:f5:d9:11:ae:
83:6e:00:84:3c:dd:47:cc:24:c2:04:03:ba:3a:d3:89:e5:90:
61:1c:8f:35:6a:55:34:8e:5f:6f:79:eb:5c:16:40:cd:ea:27:
09:67:95:f3:7e:5f:61:ed:d3:3b:c3:da:76:41:ce:ca:b5:08:
8a:62:bc:49:7d:0c:07:fa:73:44:24:c9:9c:50:5a:58:e1:43:
de:17:d2:23:76:c6:da:47:fe:3f:db:3c:e6:90:a4:e5:3f:cd:
31:81:a4:8c:5e:29:fa:d5:98:d6:f6:e2:cf:0e:5e:1c:a5:4f:
17:b6:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:51 2025 by rpki-client