
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: KMOdV0WCDeqQIO2hxH8dYcPzBUXQRGWfxQyU6TNXpIs=
Subject key identifier: EE:EF:8F:50:67:85:60:6A:9D:78:7B:C7:16:0C:AF:1E:FB:23:CB:CA
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019A31FD916C1405CD0F68DA3CEE5DCB394C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 018C
Signing time: Wed 29 Oct 2025 22:01:32 +0000
Manifest this update: Wed 29 Oct 2025 22:01:32 +0000
Manifest next update: Thu 30 Oct 2025 22:01:32 +0000
Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: gNQ7+z8SJBOgnbS/8MvdqQFQRy7VXR+8JQZEFS9jBgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fd:91:6c:14:05:cd:0f:68:da:3c:ee:5d:cb:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Oct 29 22:01:32 2025 GMT
Not After : Oct 30 22:01:32 2025 GMT
Subject: CN=eeef8f506785606a9d787bc7160caf1efb23cbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:2e:a5:81:f1:07:ef:d4:bb:9f:43:41:4a:
d2:63:b0:b2:f8:2c:b8:b2:2f:b8:2c:be:a9:b4:bb:
6f:20:d9:85:6a:1f:4f:84:7c:ac:f7:58:35:1c:f8:
ba:7c:52:5b:17:91:fd:dc:78:2a:f0:c2:4b:f5:81:
5c:fb:c6:64:1d:e2:b3:15:38:ec:6c:46:95:98:84:
64:42:dd:bd:19:5a:59:65:c0:9c:1e:7b:34:d0:10:
56:8f:b1:e5:09:9e:53:19:22:63:69:d2:9b:b1:f1:
38:1e:82:b9:91:0c:c0:c9:a7:a4:6f:58:66:b9:f5:
73:48:ed:b0:7f:34:aa:be:f2:38:42:9f:e7:92:db:
48:bd:d3:56:36:23:13:61:a5:6c:41:2f:db:91:a5:
79:5f:43:a8:46:c9:5e:74:56:59:51:15:9a:82:a8:
a6:74:7d:3e:e0:7b:d1:a8:ac:b7:bb:ca:15:5b:bd:
ab:cb:7d:09:cf:62:b9:1d:d7:89:92:39:6e:d2:af:
4a:15:41:6b:b0:e9:64:b8:3b:ef:2d:48:81:00:ef:
af:2c:ab:04:7f:d2:fb:73:88:13:0c:68:a7:7b:23:
23:51:49:60:5e:ae:50:f4:27:34:a1:98:c2:e4:08:
3f:af:32:df:6c:88:d5:85:84:6f:40:7a:49:51:c9:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:8F:50:67:85:60:6A:9D:78:7B:C7:16:0C:AF:1E:FB:23:CB:CA
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:8e:ac:e6:67:f6:d1:90:07:cf:c1:ef:96:72:ff:a3:c1:
af:39:47:71:1b:55:4b:79:68:2c:95:5d:cc:71:77:b4:64:65:
d8:91:65:bf:d8:e9:bb:26:c1:d7:f5:72:a8:c1:3d:68:33:48:
ba:47:5e:cd:f0:ad:35:64:0f:c6:07:57:75:1f:90:77:c1:2c:
1c:49:fb:b9:10:e3:94:0f:90:ee:35:55:1a:57:5e:3a:37:31:
f0:1a:f3:14:7f:dd:ea:23:eb:61:17:cf:d9:f3:84:80:63:0b:
58:ee:2e:1b:34:dd:b2:5b:87:9b:b8:f0:59:db:00:a1:9f:19:
e9:e6:c0:a4:dd:6e:24:59:20:71:cd:f2:cc:f3:36:40:44:b2:
e2:ba:81:10:5f:96:d5:cf:28:b9:e7:fb:fe:f7:d6:91:1c:fc:
91:f5:8f:3e:cb:b6:e7:6f:94:42:b9:f8:c5:d5:6f:13:a0:26:
8e:5e:4c:9d:1e:a9:bb:87:74:04:15:ed:6b:13:35:16:84:44:
4d:91:29:b2:70:76:58:b9:15:2a:04:e0:2b:9e:00:e6:a5:74:
56:82:de:3d:49:3b:cd:18:90:b8:54:9d:b7:d9:2e:4f:da:0d:
12:8f:8a:d1:c3:75:a8:54:58:2d:fd:5f:59:2a:e5:1a:3a:60:
c1:45:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 01:47:36 2025 by rpki-client