Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier: 1Ccqmf92mTj0Zo1ZgVwHcTqWZqpwQMRNCrzIPLj3AfE=
Subject key identifier: 7C:BF:3A:D9:85:D9:95:18:1A:BE:77:83:F3:03:24:53:35:9A:AF:0B
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 019A4D3CC7FF8AD0A5A8F0415125B00833A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number: 0553
Signing time: Tue 04 Nov 2025 05:00:20 +0000
Manifest this update: Tue 04 Nov 2025 05:00:20 +0000
Manifest next update: Wed 05 Nov 2025 05:00:20 +0000
Files and hashes: 1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=)
2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=)
3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: YzCN169k+hxzsxBqFoSP8VuwnzJ6yQlEFT8Fn5miiQQ=)
4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c7:ff:8a:d0:a5:a8:f0:41:51:25:b0:08:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Nov 4 05:00:20 2025 GMT
Not After : Nov 5 05:00:20 2025 GMT
Subject: CN=7cbf3ad985d995181abe7783f3032453359aaf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:7a:0b:68:df:0e:fb:b4:9f:bb:24:4b:e5:
02:93:b7:73:3a:64:75:a1:d0:48:50:a4:60:07:d4:
8e:85:bd:d5:2a:4d:1b:70:1e:b1:ea:6f:ea:53:c0:
c9:a2:70:d7:9a:77:6b:57:f4:6a:ad:dc:b7:39:26:
ee:51:d7:d3:41:ea:00:80:a5:5a:38:70:7a:0b:0a:
e1:87:75:31:d0:e0:d0:71:32:6b:16:a8:0a:4a:88:
0d:05:87:65:9f:d9:18:ff:6b:5e:50:a0:cf:bd:97:
f4:da:6b:56:6e:fb:f7:da:f9:94:e8:46:9a:c2:99:
e4:7b:44:fc:68:7e:4b:f0:aa:2c:04:02:72:70:bb:
2e:5b:d4:bd:c1:c4:c0:db:66:c3:68:5c:05:15:d3:
e7:9e:4e:ea:bd:7e:4d:8c:2c:32:b0:97:c2:46:32:
2e:3a:7a:92:2a:7a:64:3c:6f:49:e6:00:56:3f:b9:
b6:01:41:ec:dc:fe:f1:be:3a:68:95:bc:2d:0c:04:
f7:cf:6b:75:79:db:87:8b:f5:0f:0b:ac:5d:3a:b1:
93:3a:6f:6d:a5:21:be:07:5b:0a:49:4e:6e:2e:53:
02:5a:2b:e2:36:81:68:f9:44:04:c9:a5:35:38:63:
c1:aa:a2:cd:9e:e5:17:fc:1d:bd:1c:f1:c3:c1:12:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:3A:D9:85:D9:95:18:1A:BE:77:83:F3:03:24:53:35:9A:AF:0B
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:64:56:0d:f8:38:ac:18:ad:0f:53:0f:ae:e3:a4:62:ee:8d:
29:dc:7b:a4:51:66:5f:1f:00:5f:d2:e2:69:b1:a8:15:2f:98:
0e:a6:e6:a9:d0:09:9e:bc:dc:b9:4b:83:3a:5d:a6:d3:bc:ac:
ef:42:3f:fc:8e:e3:75:a8:54:d9:6d:8e:09:e3:51:60:2a:56:
04:80:03:1f:ce:8e:2f:d9:71:87:85:d1:1e:54:06:16:98:e5:
32:bf:b1:db:cd:bf:d1:21:92:02:ff:bf:56:81:89:b5:f9:4d:
2b:fa:5c:0a:f3:3c:e5:7a:0d:36:91:8b:b9:86:c4:30:92:ee:
34:9b:33:b8:c7:a0:2a:14:07:4f:18:bd:99:6b:1c:7c:c0:d6:
e8:55:8b:71:22:05:94:65:c2:e7:9b:a5:43:6c:f6:61:6a:f7:
73:e5:b9:45:88:31:c2:67:05:01:7c:04:01:ac:ad:1f:40:f2:
59:13:0a:aa:4c:6a:b3:85:35:a0:13:67:a1:ad:3a:a3:3f:0e:
ce:07:07:67:ba:70:b8:84:a3:4e:d4:13:a3:9b:e0:74:84:9b:
f5:c6:a5:1c:61:15:db:f0:63:58:3b:41:48:7b:60:bb:bf:5d:
ce:64:94:36:fe:1c:a4:ff:98:07:e5:2d:fc:64:56:54:89:6a:
d1:0b:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:57 2025 by rpki-client