Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: JJd2ggB+lGd6YlT5UULxCSCsmDyViq57g1qpZkR41gU=
Subject key identifier: B2:1F:19:FB:69:7B:76:E3:FA:4B:8C:42:F9:92:30:B0:50:4F:18:A8
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 019A4EF4DC2F5B97E43939FDA89169B0788B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 1447
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: F23CKrOyfiIVpBQUgNjPyPyKB0Kb/Odlaod3MqWqVzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dc:2f:5b:97:e4:39:39:fd:a8:91:69:b0:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=b21f19fb697b76e3fa4b8c42f99230b0504f18a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:ee:a4:bb:f7:c3:a3:45:d4:3b:13:9a:f4:
80:03:5c:bd:ee:e6:02:f0:4e:75:25:78:b9:1d:53:
b2:3c:a5:ea:fc:14:e4:bb:d1:32:84:e6:0f:9d:a9:
e4:12:2f:bf:b7:62:f3:e2:2c:07:aa:75:ea:09:57:
91:5b:cf:d3:59:44:88:8d:1d:41:20:3b:f2:f8:6b:
f7:10:68:fd:8f:e3:b9:fc:7b:a9:bb:56:94:a6:fc:
b0:9f:9a:fe:e1:42:89:ec:55:de:de:62:15:15:81:
fd:7d:0b:16:5b:2a:02:89:a8:7c:11:3c:00:7a:c2:
a7:d2:a4:2d:68:33:d3:d5:54:17:07:f5:b1:30:50:
7a:f6:54:dc:4c:a0:89:fb:ad:b6:90:50:d9:e0:e3:
a4:90:20:e7:35:03:79:81:7a:07:f9:d2:96:85:3d:
64:4f:49:b8:89:fc:f0:59:a0:62:4c:52:d5:9f:50:
98:e1:a2:28:f5:69:2d:8d:47:f8:26:b0:25:8d:09:
97:19:4a:46:53:6f:30:fd:d6:fc:2e:31:31:2a:99:
a3:69:59:d9:b0:71:9c:a4:f8:7c:5f:40:4f:16:78:
55:3b:98:80:bc:8f:99:66:e2:70:71:6e:92:87:81:
82:83:bf:25:89:b1:8b:f5:24:6c:c9:fc:74:e5:b1:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:19:FB:69:7B:76:E3:FA:4B:8C:42:F9:92:30:B0:50:4F:18:A8
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:05:48:94:8a:27:5a:e1:e8:5e:7f:7e:c3:a8:07:a7:e3:2c:
5b:23:1f:d7:be:a5:c8:88:bc:38:9f:45:00:9e:26:77:51:f4:
07:be:fe:a0:6d:e9:c2:3d:75:58:86:2b:5b:e8:ca:3c:44:39:
f6:3b:cd:b5:d1:ad:c2:63:15:a8:af:04:61:4d:89:bf:97:30:
42:45:4a:f5:78:0c:5b:1b:38:ea:f8:06:f5:98:fb:bc:04:a3:
ac:be:8f:c0:90:72:4f:6c:52:b0:0f:25:54:3b:4b:b9:f8:b3:
6f:6a:13:5c:c6:c1:3d:d1:6d:3c:44:88:42:a1:c0:5f:84:67:
09:79:01:06:4c:9c:16:72:fa:d7:b0:e1:92:04:b3:8e:c8:12:
3b:46:8f:8c:7d:64:37:6a:a5:fe:b7:86:ad:09:e4:0a:53:42:
2e:33:dc:c7:28:e4:2a:5f:08:42:f0:78:8e:9c:9e:1a:ef:fb:
6d:82:34:9a:40:34:e0:a8:59:54:a1:10:5c:7c:66:78:93:9d:
4d:72:50:ce:55:ac:8c:b2:61:db:4a:36:23:b5:2a:d4:89:bb:
e9:ea:e7:6c:12:7e:6d:62:d3:60:ad:32:8e:67:f6:27:1b:2d:
8a:bf:90:58:7d:a4:16:1d:5d:d1:35:79:1b:34:88:dc:f9:49:
ff:1b:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:12 2025 by rpki-client