Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: 4wefUPagY/oM5KboNe+XMzkP1HZkTrZHpquzV685UdQ=
Subject key identifier: A2:CD:9A:E3:88:F5:03:1E:D1:2D:D0:02:80:FA:EC:F1:87:D5:42:D8
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019A3E0066DE1BF086875FB48D174CBCD79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1704
Signing time: Sat 01 Nov 2025 06:00:04 +0000
Manifest this update: Sat 01 Nov 2025 06:00:04 +0000
Manifest next update: Sun 02 Nov 2025 06:00:04 +0000
Files and hashes: 1: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (hash: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: zC8Fg8T5+wa7ekGoJ1VrcLywFdoICCOIW0GRYJgMt7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:00:66:de:1b:f0:86:87:5f:b4:8d:17:4c:bc:d7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Nov 1 06:00:04 2025 GMT
Not After : Nov 2 06:00:04 2025 GMT
Subject: CN=a2cd9ae388f5031ed12dd00280faecf187d542d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:b0:27:14:2e:d4:eb:93:3e:81:9f:87:2c:
f1:ec:87:d1:c1:55:c0:22:e7:12:0f:81:8d:d4:20:
95:66:12:55:2d:65:bd:c5:34:67:be:5c:4d:2a:81:
ec:2f:a0:dd:a4:ce:d7:18:b8:ec:0d:5e:28:3d:fd:
0a:24:ee:71:4f:62:a5:a4:f1:85:10:0c:4b:53:49:
8e:9c:73:6b:29:8d:43:18:c2:a8:9e:da:d6:d3:aa:
2a:71:70:55:d3:a6:22:b5:53:76:9c:ff:b6:e7:2c:
df:e2:3e:f4:f5:b8:35:a3:60:be:38:b6:3f:12:88:
44:a0:65:5f:27:62:c7:5a:f4:2f:29:ce:02:cc:af:
4e:9d:a6:f4:d3:b5:fd:37:74:3b:6f:3c:52:3a:fb:
ed:f7:59:8c:be:2d:a3:10:68:5a:1b:bf:f8:36:23:
42:b5:50:e0:a8:a8:0a:20:f4:c8:af:b3:c6:31:e3:
f4:01:be:4a:2e:ea:a2:a6:c1:ac:47:78:11:a7:83:
ca:59:88:e0:03:c3:b8:d7:5c:f4:19:95:3c:d5:09:
b6:9e:a5:b9:47:ea:d6:93:7a:25:d4:8b:5a:6a:89:
ae:04:2c:50:1f:e6:ea:7c:26:20:70:24:5f:92:f5:
2c:9d:e2:14:49:5f:03:af:65:2f:39:96:a8:a9:06:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:9A:E3:88:F5:03:1E:D1:2D:D0:02:80:FA:EC:F1:87:D5:42:D8
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:9c:f6:bc:81:3e:84:83:3f:c3:21:ef:16:cc:6d:df:0d:
c8:8c:56:c0:1a:d8:c9:39:75:40:da:21:55:2f:83:05:b4:42:
3e:04:8b:24:bf:21:a8:63:b0:5a:1c:5c:d0:05:0f:4e:d5:98:
3d:c5:ec:44:87:7b:ec:44:70:27:de:ca:4b:61:c3:eb:18:9c:
95:73:ae:bf:a2:cc:c6:f0:c5:a5:50:d8:25:41:b6:ba:5b:04:
dc:76:52:0d:b4:82:f1:e7:82:d6:f4:d0:b6:5e:f0:13:2b:5a:
93:e3:db:f0:be:8e:ef:c3:8f:5c:99:37:07:4b:57:4e:3c:8f:
0f:19:20:c8:94:ab:87:0f:a4:14:10:84:a8:01:cc:7f:c7:55:
94:3f:0f:75:37:05:81:7a:6a:02:92:98:28:7e:b0:37:50:ca:
70:f1:2e:79:77:84:0e:13:cc:d5:f7:26:66:21:fc:fe:c7:cc:
e0:e0:0a:73:bb:9c:85:98:76:22:74:8d:b3:75:9d:33:57:8b:
84:de:f5:45:68:48:14:f0:d2:d1:43:89:a1:2c:92:36:0e:7b:
b1:82:e5:af:17:5a:4e:4d:2d:3f:82:75:61:c1:42:9b:a8:d5:
9a:7e:ad:4f:f9:9a:cc:95:a8:60:26:41:7c:6b:96:8c:b0:83:
75:06:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:04:57 2025 by rpki-client