
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: x24AGzieCkhpQroFbQg6nDQF6XayvAox6eXTXt27D0c=
Subject key identifier: E4:53:5C:EE:92:C6:44:3C:7F:F9:68:DC:EE:47:6C:35:8F:21:65:D7
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019A503DF6468993EBEFDC4C3C376EAFC5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0D0D
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: XFpCNSRqJUcaHEqpRhVuFGcQQa6gK3HQpjC9dqJgOq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f6:46:89:93:eb:ef:dc:4c:3c:37:6e:af:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=e4535cee92c6443c7ff968dcee476c358f2165d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:13:d0:5b:14:42:9d:d7:6c:cc:08:a9:d6:
cf:03:86:f3:07:b8:60:5f:e1:ab:b3:29:47:b6:2a:
05:e5:67:e8:3b:0d:cd:d0:b6:59:fc:e3:02:a4:14:
64:95:0f:d5:1a:d9:24:ba:a6:a6:1d:2c:62:5c:2d:
3f:ca:68:90:59:36:2a:2d:f4:50:aa:bd:fb:70:c1:
01:bb:a2:42:41:2d:50:e1:71:8d:98:c3:49:6e:e3:
b5:14:3c:79:3d:fe:dd:d4:33:79:06:8f:83:cb:82:
4c:a3:4e:44:cc:55:8f:84:2c:a8:f8:09:1a:be:41:
4c:5c:3c:c7:23:50:b5:9e:69:5b:8b:65:d8:07:02:
9f:0a:f3:a9:00:f7:07:fb:81:4d:24:b4:70:42:cd:
ee:5d:46:0c:0a:47:d0:bd:1b:27:57:14:0a:d1:03:
61:3b:12:e1:dd:96:72:47:b0:36:ea:f1:8f:cd:13:
6a:3e:00:4e:c1:65:71:87:b5:53:26:3b:a6:fb:c7:
04:cf:3c:fa:61:67:6d:b0:6a:ab:b7:99:5a:59:53:
11:b3:bb:5a:d8:e0:18:4d:64:ab:08:1c:eb:1b:c0:
23:66:1a:b4:d5:8b:20:f2:7b:ab:4e:2c:07:21:9a:
32:5a:3d:d0:bb:9e:93:40:81:3c:35:1d:ce:28:43:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:5C:EE:92:C6:44:3C:7F:F9:68:DC:EE:47:6C:35:8F:21:65:D7
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:6e:7f:ce:d5:c8:bd:46:80:75:6a:35:c2:0e:ea:5c:51:
e7:81:b8:c3:f0:d1:a8:f6:6a:43:99:84:14:85:ff:b6:57:22:
c0:b0:16:9d:00:f8:71:cf:a3:ff:91:08:cc:6f:dc:5d:f6:9b:
de:e4:40:8c:1d:ac:97:78:42:7e:33:41:93:d6:c8:89:8a:e5:
2c:3b:e4:89:6d:55:41:a6:3d:7f:7d:67:41:01:e4:f6:12:df:
e2:eb:42:72:44:e4:17:5a:44:a8:02:98:e4:13:a1:43:a4:19:
86:10:03:14:eb:5a:b4:2b:0e:6b:77:18:5c:93:94:4d:3e:2d:
bc:bd:75:12:fe:95:be:b0:c2:8b:7f:63:d1:dd:0c:9c:2d:5b:
12:dc:a2:f8:49:96:b8:3a:7f:fb:ef:86:aa:90:09:d8:97:9a:
62:06:5e:e3:cb:86:0d:21:0e:ae:01:86:a9:22:dd:50:3e:6a:
76:87:e7:1c:9f:40:5f:75:f9:f3:b1:ac:6d:80:f0:db:70:6b:
04:7e:9f:97:4f:1c:b2:f6:7b:90:7c:e5:4c:c7:3c:c4:01:ad:
6d:1d:32:bf:5b:43:72:8b:7d:49:5b:fb:e1:31:c9:89:c0:e4:
94:34:a4:3b:eb:c2:1c:ed:c1:c1:8a:54:3a:2b:56:db:b2:23:
2f:73:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:07 2025 by rpki-client