Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: pc/K3KpQejRhbrBr+lbhZ0f8jL4wFltiLDG22E4YmF0=
Subject key identifier: 65:FE:4D:66:D0:E5:1C:63:C6:B4:19:2F:39:1A:29:C8:AA:35:86:11
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019A4DE186C0FE5BAD2ADC7F42A9478BF809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: rN5ixHnob1G5M2ULI2U0/GSVW7Kz0MUcwHEYg0tqxZM=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:86:c0:fe:5b:ad:2a:dc:7f:42:a9:47:8b:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=65fe4d66d0e51c63c6b4192f391a29c8aa358611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:33:ef:99:12:8d:a0:10:4e:e8:b3:4e:90:
e7:67:3f:8a:4d:5e:94:6e:d1:fc:25:59:9e:ba:a8:
f3:52:ca:25:05:dd:93:f9:d5:a1:98:15:96:b6:aa:
87:bb:8c:d7:f4:15:27:31:8e:c7:ec:9c:64:e1:d8:
b0:7c:c4:5c:e5:ec:4d:b8:5b:f6:77:90:f0:58:66:
64:96:dd:68:bc:39:6d:79:4c:43:d7:1e:67:07:5e:
0e:4b:8d:f9:b8:81:49:f8:41:43:17:4e:48:4c:81:
d5:b2:72:80:08:25:c8:68:2d:f5:1d:95:b4:db:cb:
29:87:15:41:c6:a6:be:cb:2c:03:39:38:d4:df:a3:
7a:39:57:cf:39:7d:97:99:18:7d:b5:9f:64:5f:15:
a1:2f:71:da:c7:65:ec:9b:61:17:20:32:fb:73:3c:
c4:92:97:a0:2f:a5:b5:a1:2c:a2:ec:2d:31:bc:94:
f8:98:c5:a5:df:3d:56:c5:7f:b5:fa:d5:64:5b:93:
ec:80:1e:48:87:6e:30:95:76:18:d8:46:ff:88:d2:
8e:d3:d8:39:86:aa:3c:61:20:84:c4:71:18:75:de:
40:17:51:63:7c:e9:ff:a1:f1:44:d3:d5:84:b2:6b:
7e:68:25:42:f6:76:37:61:de:1e:a9:97:b9:59:7d:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:4D:66:D0:E5:1C:63:C6:B4:19:2F:39:1A:29:C8:AA:35:86:11
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:95:8a:5d:f6:83:59:ab:3d:af:e4:c9:e9:80:69:a9:5b:
4e:97:47:f3:0e:c9:17:59:d3:52:46:16:e7:6d:83:47:ae:00:
fa:9c:f6:d7:4b:6e:89:36:09:59:c8:c6:3a:8d:26:0b:a2:8c:
2d:87:4f:4e:12:5c:7a:a0:e0:15:d1:a0:29:63:97:2a:b5:7b:
72:95:0a:89:f3:96:40:04:d7:0a:34:a3:cb:8b:7f:9c:17:c6:
30:80:5f:50:c7:19:7a:79:a0:89:44:cd:f4:7c:9e:03:42:cd:
1d:2a:14:ce:bd:97:a6:50:94:ce:7e:8c:48:44:8b:80:b4:0a:
90:e1:3f:53:ef:d5:cb:5b:45:35:bb:37:35:b2:70:a9:e4:14:
1d:4e:34:f4:30:cd:e2:2b:51:25:18:b1:85:f7:f0:82:fb:46:
f6:00:2a:dd:75:65:f9:fb:ea:92:13:c0:dc:d8:b1:77:36:e3:
23:c5:88:14:e8:2f:98:cc:c0:c6:57:41:fd:d8:16:6e:8d:e2:
f8:6d:05:39:e0:40:e4:24:af:f4:d5:d4:8a:33:2b:4f:d3:df:
36:6b:96:de:66:38:ed:0e:dc:07:27:cf:76:65:15:2a:22:10:
e6:06:0d:d5:eb:af:c0:0f:51:d0:f0:7e:d1:ea:35:6f:66:74:
7e:3b:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:28 2025 by rpki-client