Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: RlzcoH2Rm916QO9XXXN7qLjbLsJ8irPYXXACX0MHgi4=
Subject key identifier: 44:DD:3D:20:29:2A:82:13:A4:5F:2C:1F:B5:A7:18:97:18:31:E9:AD
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019A4C98673AC6FC8E35900980D0EF307E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0B76
Signing time: Tue 04 Nov 2025 02:00:47 +0000
Manifest this update: Tue 04 Nov 2025 02:00:47 +0000
Manifest next update: Wed 05 Nov 2025 02:00:47 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: AeP9/lnj+/bGh8chgV/Xjf+n+eb++0pS5OivG/2QFCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:67:3a:c6:fc:8e:35:90:09:80:d0:ef:30:7e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Nov 4 02:00:47 2025 GMT
Not After : Nov 5 02:00:47 2025 GMT
Subject: CN=44dd3d20292a8213a45f2c1fb5a718971831e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:0d:bf:9d:84:e2:6c:79:f2:34:8b:d0:c6:
c6:13:16:de:1f:7f:63:11:b4:bb:18:47:b3:29:b7:
2d:9a:fc:d5:34:9e:b8:c3:2b:49:92:96:b7:a1:77:
bd:8f:8d:51:54:3a:13:15:60:c4:51:dc:1f:87:3c:
e8:5e:4b:37:9d:19:d5:99:7a:1e:47:ae:66:0a:b4:
75:5a:05:0e:20:fe:88:ca:a1:01:3d:15:55:9c:ed:
23:f8:64:1e:39:95:57:58:eb:76:7c:3f:31:e0:e2:
99:91:8d:cd:6d:68:91:83:0e:c7:b6:16:89:1d:d4:
f2:76:3f:16:a6:83:58:c4:44:17:99:51:d4:cf:d9:
6e:e2:b6:17:9f:74:cf:71:3d:50:04:7b:74:c4:be:
4e:fc:37:be:4c:1e:51:c6:c4:6f:80:9c:ac:d0:bb:
04:28:a1:6d:11:01:c6:b9:7a:eb:d3:96:b9:74:f2:
c7:02:df:52:55:5d:38:a3:2a:bd:af:c5:b9:0e:21:
83:6f:8d:bf:4f:d5:3f:39:f7:d5:63:26:5d:f4:27:
cf:1b:9a:e6:fc:60:3d:a0:12:94:69:71:8a:aa:56:
56:39:de:e0:88:6b:7e:af:b9:98:fe:88:e2:f3:62:
e0:ac:3d:35:ee:72:98:4f:5f:4b:2b:ea:5b:e4:38:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DD:3D:20:29:2A:82:13:A4:5F:2C:1F:B5:A7:18:97:18:31:E9:AD
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:20:dc:07:74:8f:86:77:46:04:80:2f:b1:8f:02:1d:dd:10:
9b:f2:28:c4:ee:ce:2c:9e:ad:28:60:66:b1:80:4f:bd:75:b3:
72:4a:17:ae:c5:20:4e:ba:52:13:13:44:34:24:c0:b3:7e:da:
65:f4:2b:95:c4:93:69:3d:cf:6e:17:1b:85:31:bc:5b:80:6c:
d1:46:c4:2d:8f:d8:5a:10:18:93:01:83:c1:4b:df:ce:ff:6d:
5f:7b:77:0b:42:9b:68:af:9c:a6:e8:5a:49:04:ec:00:d4:32:
9e:e6:c4:84:28:cf:7a:ec:f6:cd:ed:c0:b8:c9:e0:47:50:cd:
4e:a8:e3:b9:cc:51:fe:70:fc:65:de:36:d6:3a:2d:a1:e3:f0:
45:9b:46:0b:0b:43:46:7b:ab:26:2f:82:7b:d8:97:c7:f3:b3:
35:df:59:31:4d:4f:a0:4a:e6:21:3a:f0:96:74:c7:ca:8f:82:
22:56:66:0d:60:7f:e6:1f:52:66:42:fc:15:13:1f:4b:5b:6a:
ad:01:d9:56:79:eb:e6:4b:42:48:91:30:a0:f2:81:52:66:27:
54:fb:19:51:6f:d9:76:0e:46:bd:e9:d9:50:65:cf:9d:5b:fa:
de:99:6c:02:d4:29:97:19:cd:a7:a8:1a:d1:0f:77:e3:10:63:
c2:9b:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:36 2025 by rpki-client