Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: igeLDKjN9jdmZBfVPWnixWYiQvzH6h2IhsBM0HOA8/g=
Subject key identifier: 19:D4:4F:D5:25:E2:0F:74:72:16:82:9C:D3:3C:14:22:98:69:95:77
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019A4F2B00DF85A1DA94BD8A2C3200FEC099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0D25
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: EsuRS2hud2shUpZiXbfpgwTjGMRNn7szuzg/l4MhDxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:00:df:85:a1:da:94:bd:8a:2c:32:00:fe:c0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=19d44fd525e20f747216829cd33c142298699577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:6a:30:c0:2e:80:ee:ef:57:aa:3e:56:bf:
c3:6a:63:d3:ca:e4:06:e9:16:e6:6d:1f:22:ed:e4:
61:27:4d:5e:15:fe:d1:03:d6:c6:c9:5c:7d:bd:64:
0a:f4:a4:cf:b9:7b:f8:10:a0:2b:6f:34:2b:a8:9e:
f1:25:de:5a:dd:14:a3:bd:43:63:e7:3d:e4:04:71:
e9:e8:06:f2:c5:8f:fe:fc:c4:8d:63:15:7f:ca:4a:
3f:09:2a:4e:44:bc:33:57:29:67:f4:94:9b:53:3c:
dd:c1:d8:0e:be:1f:91:dc:c9:b0:b2:d1:1a:40:5b:
6e:62:2f:71:32:9e:c2:52:72:46:b8:c1:78:89:27:
9e:1d:0d:3a:13:8b:3b:f3:81:b1:c5:bf:86:48:11:
5f:b2:eb:31:d2:c6:24:2a:3f:7d:fc:67:eb:18:3c:
6c:1a:b8:d5:4b:99:4f:0d:d0:6b:88:ea:ae:a6:bf:
19:53:f8:14:95:74:71:9f:07:09:26:c5:5e:96:c5:
72:63:f7:ad:1e:b6:a1:60:62:69:f4:52:b9:b5:f9:
05:3f:ae:b4:a0:98:3d:13:ce:ff:7d:e1:85:f8:04:
c2:57:fd:99:07:22:46:97:9d:ed:df:b5:8d:9c:2d:
90:4f:1a:cd:50:34:dc:b7:42:3b:e3:f2:78:f9:21:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:4F:D5:25:E2:0F:74:72:16:82:9C:D3:3C:14:22:98:69:95:77
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e7:f9:f5:57:b1:79:6b:88:12:ae:e1:d9:ac:d0:62:8b:6c:
61:11:98:a0:24:45:fe:8e:e6:c4:19:a2:db:4d:ac:71:59:11:
1d:b6:e0:0a:a6:38:a5:38:08:66:78:d3:e2:90:05:4f:ff:42:
0f:a5:d4:6a:bd:b4:a7:24:c5:fb:db:e9:a7:4a:20:cf:f2:de:
33:92:30:ff:5a:a1:cd:db:72:ea:12:fd:05:72:9d:7a:39:8f:
3e:5f:bb:f9:17:ee:32:0b:b8:dd:ec:e1:fc:04:41:0a:5d:b7:
3d:eb:84:d6:d6:79:11:ab:58:6c:f0:d1:d6:02:b2:ca:05:10:
84:aa:46:92:12:57:82:26:73:31:d5:dc:7d:5a:4e:10:7b:35:
44:52:d2:d7:32:6c:1c:e3:dd:a0:35:8d:44:c8:54:ce:c2:b5:
95:9c:8b:c4:03:51:7e:0d:e9:70:f3:4d:99:80:6c:ed:83:83:
6f:13:f2:2d:49:3a:33:44:4a:cd:9d:d1:0f:9e:ad:12:ab:70:
a5:7d:7e:2d:0f:3e:ff:44:ef:10:49:a3:1c:95:13:60:37:f9:
76:d9:94:d9:af:0e:79:a1:35:3a:ff:99:08:64:8d:93:97:2d:
05:28:e8:8d:7c:f2:a1:c4:50:0e:ca:00:2e:dd:99:b9:56:89:
f4:8d:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:55 2025 by rpki-client