Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: oQZGylOz4WTCRiPuKmtxrQ2RgnN8fZRKsrqGuRiVo+I=
Subject key identifier: 47:13:8F:79:69:31:0F:73:29:0E:EB:F3:6B:95:AB:1C:71:DA:B7:A7
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 019A4E188989E0233E88B0605F0FC94B7F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 16DD
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: ZveofPKdnlqQ0GanaL6xoubNxtQOrL2/627IMQQkfRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:89:89:e0:23:3e:88:b0:60:5f:0f:c9:4b:7f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=47138f7969310f73290eebf36b95ab1c71dab7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:0f:f4:5d:74:be:15:7b:c0:e6:eb:e1:2f:
87:4a:c0:58:37:a5:45:40:06:81:93:1b:76:d1:31:
6c:04:50:02:17:a7:99:29:d0:46:7b:7e:f0:a7:ff:
a8:c9:41:d0:ae:45:d4:ad:6a:55:b1:05:79:0d:eb:
6c:2e:bc:4f:3f:e8:7b:9d:0e:89:5d:fe:e4:ac:42:
ba:4f:41:0a:de:95:b5:7f:a7:c2:06:29:37:ee:fd:
e8:73:d0:41:5e:50:0a:8b:f1:25:45:3b:83:49:89:
d1:ce:fe:ca:97:cf:0f:d0:91:9d:41:50:8f:08:82:
fa:a5:c6:ea:cc:73:3b:a7:7a:c6:c3:28:49:88:69:
5e:11:63:a8:d8:1e:dd:3a:35:3b:ff:21:30:51:ef:
94:ad:7e:99:5a:f0:72:82:31:34:77:7c:5c:e2:21:
2b:7e:92:aa:6d:96:ee:be:3b:ea:02:de:1c:85:04:
35:8f:33:42:74:a6:b2:13:19:8d:00:ae:45:a6:60:
74:93:c9:90:8e:54:4f:7e:e3:d0:30:53:ea:78:4e:
e5:eb:ff:b1:81:49:74:78:d7:34:ba:0b:b0:2f:28:
05:c9:4a:5e:a6:4d:59:4c:f0:f2:6a:40:a9:ae:45:
c5:62:12:19:fc:1f:56:45:09:98:9a:9f:73:86:f8:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:8F:79:69:31:0F:73:29:0E:EB:F3:6B:95:AB:1C:71:DA:B7:A7
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:d1:31:93:b7:3e:bd:57:5f:b9:8d:97:97:cd:ea:09:b4:
26:c4:54:28:76:e2:36:30:d9:fe:49:b7:da:00:ac:cb:f6:53:
d7:41:88:28:54:80:67:af:f1:b8:bd:45:2a:53:42:75:57:05:
74:c8:29:e8:cf:28:cd:4b:a6:93:7e:81:41:c9:5e:97:3b:2c:
08:1c:bf:e3:df:dc:1d:80:26:3e:9b:2d:70:00:83:5b:a0:e2:
7a:3d:71:76:f3:63:35:12:b8:6f:54:8b:a0:25:31:17:dc:f1:
14:bd:aa:60:da:43:6b:f8:88:5d:7a:59:f2:b4:c7:af:35:c4:
56:39:7e:ef:29:52:29:0d:4e:93:04:ba:90:9d:96:17:d7:9d:
9f:f2:5f:c3:65:6c:73:d8:4c:4e:75:88:8a:d3:c9:03:6a:97:
6b:8f:54:4a:5c:b3:2f:35:08:01:85:b9:98:db:76:a7:01:a6:
e5:a3:be:b4:99:f5:ee:49:81:3c:41:3a:e7:61:b9:30:9f:46:
11:85:59:e6:d7:91:fa:ff:1d:87:00:b5:03:cf:0b:e1:b0:51:
0d:80:2c:cf:fe:fa:6d:0a:eb:c3:f8:f5:42:03:d5:cf:d2:01:
86:92:07:ea:45:89:a3:62:4c:2a:d5:17:b7:9b:6a:24:2f:da:
9a:50:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:11 2025 by rpki-client