Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File: xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier: g29eXav1npIXoI7CcU/NY2DxdxGlm5VceLi0uMbucz4=
Subject key identifier: E7:22:E3:8B:1C:3D:37:61:5C:F7:C0:4C:69:AD:1B:A3:8E:3D:F5:3F
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019A5299FED07FECF1B88A3F737B30F00A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number: 083E
Signing time: Wed 05 Nov 2025 06:00:15 +0000
Manifest this update: Wed 05 Nov 2025 06:00:15 +0000
Manifest next update: Thu 06 Nov 2025 06:00:15 +0000
Files and hashes: 1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
3: X6FG8vp9oU-aDKMjJlvZ1w9-TRg.roa (hash: GAtjgJydI1/w8ZnGJHE5GCoTGzEp1QKcuNq0x8TAna8=)
4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=)
5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=)
6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: RIm/sRNilNb6puPFEIQKPrSw04G3Cy0XwkN6+GgT8co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:fe:d0:7f:ec:f1:b8:8a:3f:73:7b:30:f0:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Nov 5 06:00:15 2025 GMT
Not After : Nov 6 06:00:15 2025 GMT
Subject: CN=e722e38b1c3d37615cf7c04c69ad1ba38e3df53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:29:20:ff:ce:34:2f:47:42:64:3d:0f:d8:
64:df:bc:1f:67:e8:51:76:b9:15:37:66:04:d7:3f:
dd:20:74:c9:5c:d0:76:25:31:79:49:30:5b:ba:c5:
97:21:87:69:17:b0:fe:aa:85:8b:d0:67:f5:8c:b6:
17:ac:02:87:6f:77:84:f1:ad:ff:3e:c1:72:2e:df:
af:7b:e4:ac:d0:57:9e:b3:ca:10:fe:22:6b:2e:25:
64:d0:9e:71:dc:84:c0:b0:e6:80:17:90:47:99:5e:
bd:be:db:1f:3f:3d:cf:3f:91:a8:1f:96:3e:2c:c0:
e1:11:1b:51:a2:b4:34:cb:1b:08:da:5f:07:ef:75:
ba:c7:dc:59:29:dc:1a:06:7e:d6:bd:3a:fd:91:30:
98:43:fb:2d:27:6e:ca:e8:d1:2e:37:eb:ef:fe:cb:
11:0d:67:c5:28:4b:4c:a7:a4:07:bc:0a:c9:49:4b:
c7:f9:aa:a4:4e:7a:9c:96:45:d4:bd:b4:9b:e6:96:
34:51:53:96:47:d1:d0:e3:b8:0d:af:91:d3:94:4e:
9d:9a:96:cf:17:50:fa:ed:45:85:ad:d2:99:30:1e:
cd:03:9a:22:1e:4f:60:8b:fb:91:57:38:2a:c3:ae:
de:52:48:60:22:c8:83:e7:6a:32:d8:5d:45:81:bf:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:E3:8B:1C:3D:37:61:5C:F7:C0:4C:69:AD:1B:A3:8E:3D:F5:3F
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:96:bd:1c:55:17:9c:c3:18:f8:5c:b8:2d:cf:35:4a:a5:
78:31:81:c0:d6:c2:d2:4c:f7:76:90:72:a9:7b:c3:9b:90:92:
f2:e0:34:a6:76:87:2c:a7:42:97:54:06:46:3c:a5:b1:17:5b:
1a:11:49:dd:87:35:0d:f5:fd:00:58:e2:76:b3:81:12:a1:5b:
a5:2f:d3:12:05:b2:11:a6:ec:1c:00:d7:fe:2e:6a:7f:ac:04:
56:36:23:2e:fb:07:29:9d:44:97:3b:fe:a6:28:35:0c:9e:e5:
80:e3:43:5e:50:61:bc:ed:d3:c4:6a:27:d8:98:9d:af:bb:96:
a3:db:cd:41:d7:bb:53:16:71:8a:20:ae:82:19:44:b9:9d:26:
ab:dc:3e:e2:10:25:fd:14:f5:16:7b:af:cb:cf:ed:67:46:5e:
de:fe:8a:90:ca:9a:94:51:cd:94:2d:a4:50:5a:02:e7:81:52:
4a:5b:a8:0a:c5:dd:9e:11:ca:87:98:6c:e9:1d:d4:af:8e:f5:
b6:67:85:34:02:cd:16:38:7a:84:b2:c8:75:b3:99:5e:84:3d:
b1:7f:48:28:47:2a:42:23:a4:e5:3f:4d:68:b6:35:fd:da:0c:
9b:d6:6d:15:c3:96:6f:29:82:0d:71:13:ac:bf:cc:23:17:c0:
fe:29:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:45 2025 by rpki-client