Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: wNJe+00lfcRELg8LQKjHqsuLB5UbYi4jsRy/oYDFVY4=
Subject key identifier: 09:68:89:97:4E:3F:E3:D4:A3:97:B5:29:C2:60:DE:74:07:CA:E9:8E
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 01989223C0C51F84CAC57A63341C33D0C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 15B7
Signing time: Sun 10 Aug 2025 04:01:13 +0000
Manifest this update: Sun 10 Aug 2025 04:01:13 +0000
Manifest next update: Mon 11 Aug 2025 04:01:13 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: 6P0xb1OuHlFf4iTvbm/89nSH8POdcMTBS/3Pt9/TghU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:c0:c5:1f:84:ca:c5:7a:63:34:1c:33:d0:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Aug 10 04:01:13 2025 GMT
Not After : Aug 11 04:01:13 2025 GMT
Subject: CN=096889974e3fe3d4a397b529c260de7407cae98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:89:c1:49:02:c4:78:98:9d:3c:8e:1b:62:
15:9e:c2:a1:cc:5c:25:3f:31:f3:30:61:e7:c6:b8:
c7:f6:46:1f:e7:41:f1:6c:c5:18:72:d6:fa:fd:7d:
a0:bb:4a:07:f4:95:66:9e:5c:1a:d9:a9:60:ac:08:
1e:60:6d:6b:98:7a:f7:89:79:ff:80:a9:f2:e7:08:
63:f5:b6:3e:5d:99:d6:e8:31:30:90:b2:33:72:bd:
12:80:f6:64:7a:5b:0e:3b:2e:3b:92:49:17:ca:9a:
45:18:4e:d5:06:0c:a2:56:8c:89:dd:df:db:6c:68:
18:ca:a1:da:b4:8f:53:63:14:ed:7a:38:b6:f5:d9:
72:63:25:83:51:30:23:46:00:b2:62:65:6f:74:10:
f1:6f:39:3c:ea:db:64:20:ec:97:0e:71:a1:16:57:
90:64:e7:1d:3a:8e:ff:5f:16:a2:35:ce:cc:07:cb:
ef:12:4e:45:0e:2e:db:74:7f:10:3b:b5:00:8c:ce:
4a:00:0c:69:20:ea:81:49:1e:b4:f9:b6:08:19:5e:
d5:77:93:44:8a:28:b0:87:64:47:73:2a:77:65:9d:
74:6c:50:17:c1:c5:24:eb:ea:d9:eb:05:e0:c4:01:
e6:1d:51:28:eb:27:23:28:18:a4:47:82:2f:fd:69:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:68:89:97:4E:3F:E3:D4:A3:97:B5:29:C2:60:DE:74:07:CA:E9:8E
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:1a:4c:56:25:73:5a:47:ed:56:ce:65:87:01:64:b7:cd:
25:b5:a0:6a:5e:55:16:7c:68:9d:d8:29:e1:9b:c1:93:2f:ab:
83:0f:2a:17:e6:8a:93:a2:61:2d:c2:aa:9c:4a:92:f9:80:80:
4d:26:95:83:24:f4:88:c0:c9:8d:9a:c4:94:7a:7f:bd:b2:00:
e0:73:d2:eb:9e:60:c8:d8:65:25:d6:6d:22:08:f2:2f:57:ec:
03:b6:a2:16:39:ef:c4:e8:5d:99:87:88:78:5c:c5:bb:32:90:
35:d3:6f:38:a9:a9:d6:9d:50:d6:1e:8c:68:fa:04:5a:d9:93:
7b:13:e9:ca:bd:88:20:3e:e0:0e:f7:c5:20:73:75:f9:f9:73:
b6:e4:b3:7e:c2:ee:93:0e:50:c2:3d:f3:b6:b3:d9:57:06:ad:
c9:49:45:6f:4c:67:2d:78:cc:b1:22:13:ac:09:f2:15:43:02:
72:88:d8:7f:32:b3:15:22:4a:1d:95:3a:70:4d:5d:7f:f4:96:
60:07:d9:14:3c:ff:3c:0c:51:d9:ab:15:7f:bc:46:30:28:b9:
83:6f:72:9f:e3:d5:57:03:bb:75:45:0a:45:09:6a:9f:fc:99:
84:e7:bf:a0:12:9f:c5:3f:fc:bf:89:4b:ab:50:76:22:e0:36:
86:e2:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:25 2025 by rpki-client