Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: 7eb/gUIQjBWxafjATvDqrXm3h9tXJShihXhOMFtAjJc=
Subject key identifier: AC:46:93:FC:07:77:CA:98:75:E7:A7:6B:01:EE:7B:E0:1F:17:58:29
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019A711314900139C2C40F2FA2024B6ABDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 11AA
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: 7GtaqMsUIuY33AzFLOsQuheMFd2CCYRyU2kJqbAdQcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:14:90:01:39:c2:c4:0f:2f:a2:02:4b:6a:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=ac4693fc0777ca9875e7a76b01ee7be01f175829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:84:32:a5:69:84:a0:ca:d1:ac:7a:e3:8b:
f5:54:31:24:53:fe:0a:0a:84:62:81:a4:d8:23:fa:
6b:74:e9:7a:f7:fe:16:6f:2d:82:75:f9:b7:3b:62:
8a:41:e9:53:58:5b:ea:9f:f9:fd:1d:ba:66:3c:09:
5d:d3:45:59:2c:40:bd:7d:37:05:3c:2a:99:71:f0:
d4:cc:0b:ae:3f:66:89:7c:95:1a:a9:7f:05:f6:ea:
b2:66:b5:d3:15:44:81:10:91:44:8b:2f:33:bf:7d:
b7:87:00:61:18:d9:a2:f4:9c:41:b2:b5:7e:dd:aa:
37:23:ed:f2:4c:34:e0:49:87:f7:72:7b:55:f9:9e:
59:ca:9e:23:be:de:b1:ef:4f:72:53:02:20:a2:90:
45:d3:e2:0c:20:56:f3:e0:a6:e2:fe:b4:54:66:9d:
2e:76:ce:47:6c:c6:66:5e:38:44:39:41:e8:b9:22:
8e:ef:bd:b1:42:ba:8d:f8:d2:b5:c2:48:60:2a:35:
8d:0f:93:f1:a3:ec:50:9b:94:3d:de:b1:21:a5:d4:
5e:9c:1b:67:40:66:ed:11:3d:29:91:5e:4b:fa:76:
fd:18:a6:21:34:e6:29:6b:e1:32:50:7c:fb:c2:ab:
7a:e8:eb:83:42:81:24:73:98:ad:c1:70:82:f3:59:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:93:FC:07:77:CA:98:75:E7:A7:6B:01:EE:7B:E0:1F:17:58:29
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:13:a0:f0:b9:e1:9f:c3:2a:e5:ff:8b:2e:61:43:05:10:0d:
e6:c4:4c:d9:55:ac:2f:44:76:36:d9:db:4b:f1:84:2a:3b:7a:
8c:3b:63:7d:7e:48:e0:26:9f:8a:90:53:66:0e:f5:b7:7f:43:
3d:a5:07:b6:fd:08:46:c5:57:da:a0:13:bf:5d:8c:55:1f:d7:
92:f3:5f:92:b3:c3:a9:3b:c2:b4:b3:b1:73:53:0a:73:f2:8f:
f3:77:b7:f2:da:83:ee:6e:6d:8f:60:d5:dc:11:31:d5:fb:f3:
a0:41:5a:17:ef:2a:40:0a:f2:39:fb:60:fe:28:47:82:d8:98:
50:2c:16:5a:fd:3c:3c:1a:31:79:9c:4b:f6:d0:29:d5:a9:00:
79:0c:3a:93:15:c4:f1:70:a4:1e:59:c9:27:95:8f:d3:6a:54:
63:0f:4c:27:85:fe:2d:8a:2c:b9:cf:1f:4e:16:87:c2:01:dc:
0e:5a:2d:3f:93:86:61:31:db:b7:be:e1:f6:b4:a3:70:05:8b:
15:7b:c7:4f:5c:14:0d:d0:9b:5c:19:cf:d1:69:d9:ed:e5:11:
25:0d:f0:67:f5:4e:44:0a:00:4f:4d:a5:4e:71:78:6c:ae:42:
b2:cf:fe:08:8f:47:62:08:ca:11:c4:0a:4d:d7:3c:ef:69:b1:
e2:07:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client