Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: owzFMrjTEphYhguYktgE1Jlu6XhyKZS0groWbmzWrks=
Subject key identifier: 11:27:D2:CD:A4:4F:F4:E2:C8:2B:06:56:AE:AE:C9:77:38:C2:0F:70
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019A54BFC84B31AFA34A65EBC56C4DAB02F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1429
Signing time: Wed 05 Nov 2025 16:00:45 +0000
Manifest this update: Wed 05 Nov 2025 16:00:45 +0000
Manifest next update: Thu 06 Nov 2025 16:00:45 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: ABpWVkN9DcLLWGxDeNxLBphtoHYfWSBypxHGkRm6ZEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:c8:4b:31:af:a3:4a:65:eb:c5:6c:4d:ab:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Nov 5 16:00:45 2025 GMT
Not After : Nov 6 16:00:45 2025 GMT
Subject: CN=1127d2cda44ff4e2c82b0656aeaec97738c20f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:24:5e:e3:ae:5c:ae:c5:c3:5b:86:55:ed:
c2:d9:2c:84:d0:65:6b:f3:f9:0a:a2:ae:78:40:6d:
48:65:90:5a:d8:cb:09:d9:c2:ab:c6:81:d6:36:69:
8c:47:42:67:78:44:f4:d5:aa:bd:14:2a:c2:6c:0c:
82:96:65:af:45:3e:f3:df:d7:20:71:33:5e:3c:5e:
4b:88:f0:86:86:4e:35:42:d1:46:a1:62:dd:ef:99:
62:8b:94:fb:6e:67:28:dd:8c:cb:35:a7:bb:89:9d:
f8:a0:2c:0c:3c:fc:bd:23:c8:23:58:73:50:a8:4f:
10:ee:09:43:ce:1a:fe:63:7f:4a:a9:39:4f:ad:11:
00:80:9c:a7:57:06:e0:62:86:59:cf:e6:6d:f6:3c:
2d:ae:41:51:ec:72:94:0a:ef:28:aa:3d:a6:05:2f:
a5:58:d4:56:05:92:26:dc:b5:17:19:d4:7c:13:32:
06:ac:6e:20:cd:b1:01:30:45:59:19:97:95:b6:4a:
81:71:b0:f7:2b:db:21:76:08:a0:03:90:f5:56:e5:
2b:38:d0:29:67:6d:39:ea:94:6a:b5:91:8f:83:74:
74:d1:5f:d2:1c:14:f1:2d:d2:61:c2:9b:b1:f5:fe:
6c:c0:e3:c9:1c:e3:a2:01:cd:be:ef:32:87:cc:29:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:D2:CD:A4:4F:F4:E2:C8:2B:06:56:AE:AE:C9:77:38:C2:0F:70
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7b:b3:f5:8f:94:c3:bf:90:25:85:01:af:bf:bc:e1:57:0b:
3e:71:a2:ec:05:88:4d:0e:a7:ee:d0:c4:2a:91:7b:d8:dd:3c:
55:03:df:a7:cf:69:d5:fa:2a:2a:46:6d:8c:10:72:e6:7c:6d:
1c:a5:3e:d1:86:28:a5:4f:76:33:41:73:a8:7d:f2:ff:ca:09:
69:77:51:36:ec:56:4a:e9:bf:99:42:b4:ad:de:10:c0:c1:b8:
6d:38:a9:51:52:39:e4:bc:a4:c8:89:ef:1f:24:fa:dd:62:58:
9d:25:94:fb:50:db:16:d9:43:3f:fd:c3:95:3c:eb:a3:c7:fc:
ca:3c:a6:c0:7a:4a:41:5f:5e:04:ea:2e:98:37:7d:93:2a:5b:
b4:21:88:17:74:1e:9a:45:28:b6:b8:c6:b3:b1:10:db:0a:e2:
5a:4f:50:98:35:23:87:43:01:22:a0:6d:ea:ba:ff:40:0a:89:
6c:a9:97:eb:9a:dc:d8:d2:2b:74:36:88:5a:cc:ae:78:7c:6c:
e2:38:88:61:c0:e7:23:f6:d3:bd:0b:a6:93:3b:21:fa:cb:21:
fb:22:33:bd:f2:75:91:c8:9b:9f:28:aa:98:87:6a:23:1e:a1:
c2:f8:c0:e6:f0:0f:e8:7b:2d:33:83:65:45:54:cf:69:4e:7e:
2f:2c:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:04 2025 by rpki-client