Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: qBm9zGHV0sXHnYvUmX3/K9NKeCEhSyE1wyd0bq1fzzk=
Subject key identifier: 81:3E:84:A6:19:09:13:56:36:B4:F4:42:A2:8F:DA:48:63:24:73:04
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019A4FD04E41D7199758616B4A2DFDC95EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0470
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: AEbUkeE/uy3JX5GQeI+lx39ismyfxSyGG2MaKeQZONo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4e:41:d7:19:97:58:61:6b:4a:2d:fd:c9:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=813e84a61909135636b4f442a28fda4863247304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:0c:9f:48:cb:bd:4e:1a:5a:1f:7b:3c:8f:
0f:8a:61:bc:37:54:a4:b1:f5:a5:3b:7c:80:ce:9a:
db:a7:86:de:bd:24:de:49:1c:19:10:7a:e7:4e:d7:
f9:0d:53:23:7d:82:58:33:0c:71:05:55:48:ac:b3:
5a:40:f7:88:8d:a3:39:71:98:8e:81:c5:e3:25:1f:
c6:10:29:61:51:0b:e8:1d:8b:26:42:7c:75:35:ee:
be:69:8f:ab:c5:83:cd:48:35:cb:18:1d:7d:e3:29:
36:b6:a0:64:aa:6f:cb:94:f2:45:45:ea:e1:97:61:
d3:68:d9:cb:f4:b5:5e:fc:d8:14:c5:82:a6:e1:a1:
6b:bd:c8:ba:bd:99:f5:d5:68:83:8e:fb:06:b5:1f:
a5:30:77:b2:a1:e7:6e:ee:73:08:d8:e7:0e:70:2c:
26:6e:64:94:b9:c2:1e:94:5e:ed:fc:92:6f:13:2b:
82:3b:54:af:b3:cd:d8:b7:e8:78:b3:b6:d5:be:8b:
eb:a1:49:0f:2c:9e:8c:60:b0:f4:f5:04:f0:3b:ac:
87:09:33:02:a2:0c:07:e4:88:6b:4c:ca:61:2c:ae:
95:f3:fd:8c:32:c5:f8:48:69:7b:ac:cc:f8:34:67:
a4:82:17:89:b9:15:0e:5e:19:eb:b4:86:d3:8c:43:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:84:A6:19:09:13:56:36:B4:F4:42:A2:8F:DA:48:63:24:73:04
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:c9:4a:fb:52:ca:51:b9:71:c0:7d:35:a2:ee:a2:27:55:
1c:94:d2:e2:00:93:3d:7c:26:bb:4e:d6:d4:65:8e:a2:8c:bd:
74:38:f1:47:d8:6d:50:cc:87:12:e8:2b:24:a6:95:bf:15:ca:
6b:c2:8a:e9:5f:3b:ad:af:1a:ce:72:5b:ce:ad:32:16:26:4b:
9f:ed:24:c7:d2:f0:16:77:a6:13:8a:58:e9:1b:d9:83:07:f3:
6d:40:23:c4:a6:90:b9:46:e1:c7:5a:9a:00:0f:c6:da:36:2e:
a3:fd:82:a9:40:40:fb:2c:a9:e1:77:7b:e1:72:8d:8e:66:69:
36:d6:23:a6:c0:35:81:36:53:c4:9f:2c:3e:8b:5e:61:a6:45:
2c:e8:6d:40:bc:1f:57:b7:16:d3:86:0e:f6:c0:30:a5:88:df:
06:35:46:25:15:3b:62:86:34:95:0c:b5:44:82:19:ce:58:8c:
68:10:7a:67:26:e1:47:0f:68:b4:04:cd:c5:18:15:ab:6e:d1:
5e:84:25:bb:53:fa:d8:9a:e2:1a:62:e0:0a:aa:b6:c6:9d:5e:
91:2d:0e:65:23:58:d5:13:af:81:2f:d1:cd:f9:12:02:ad:92:
c0:15:c5:82:10:46:cf:74:8d:75:20:4d:cf:92:56:14:c7:dc:
1d:ae:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:20 2025 by rpki-client