Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: qNVkFXw5SEzer9UoJhollnqB3GC6BmQXWYie2LH8RdA=
Subject key identifier: 81:B4:FB:6A:89:D2:96:43:9F:26:0B:3E:EF:87:5A:B2:66:D0:89:D7
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 019A4093A437C0C65E38699E34D7D8758737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 0888
Signing time: Sat 01 Nov 2025 18:00:08 +0000
Manifest this update: Sat 01 Nov 2025 18:00:08 +0000
Manifest next update: Sun 02 Nov 2025 18:00:08 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: rlqcIUzrKJMzVcomHqfIP9agmnazJwiyjRAu0lP5Inc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:40:93:a4:37:c0:c6:5e:38:69:9e:34:d7:d8:75:87:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Nov 1 18:00:08 2025 GMT
Not After : Nov 2 18:00:08 2025 GMT
Subject: CN=81b4fb6a89d296439f260b3eef875ab266d089d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:e6:39:f6:a1:da:f7:2c:5b:38:0f:69:2b:
94:21:02:e4:c4:84:79:40:9c:7f:1a:fd:05:38:b9:
b3:ec:22:03:4f:04:36:d8:b0:1c:87:46:34:8f:82:
d8:36:f2:89:f3:0c:22:e8:a0:f9:be:42:4e:4c:44:
95:a8:71:ce:70:da:9f:05:11:a2:da:a1:1e:de:1b:
43:ee:91:41:37:eb:73:87:9e:98:8d:67:ec:ae:b9:
a5:8f:51:db:83:63:77:2a:5e:6d:f8:b9:a5:0d:51:
5b:a2:21:1f:69:1c:72:ab:08:b1:6e:8e:2a:f3:3a:
01:36:10:24:cd:57:c3:b8:4a:34:32:99:4b:bf:ff:
35:03:c5:51:d8:be:99:c7:04:22:3f:d0:fc:05:2a:
63:8b:a7:39:dd:79:5a:43:87:11:c6:15:bc:0c:6f:
ce:a8:cb:b0:e6:19:d2:5e:a9:35:17:84:3e:35:ee:
1a:b1:2c:a2:9b:2a:9b:16:11:fa:33:c9:db:e3:8b:
c5:ef:94:09:5d:5c:82:8b:a2:34:ac:2d:c3:ee:dd:
22:eb:6e:60:2e:3f:6a:51:63:b0:db:f6:ff:b1:05:
0c:2d:86:86:f2:50:85:05:f1:62:89:d5:d6:95:56:
7a:fd:19:a9:6e:16:6c:74:f2:23:a8:55:e8:f9:6d:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:FB:6A:89:D2:96:43:9F:26:0B:3E:EF:87:5A:B2:66:D0:89:D7
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:bd:41:0a:14:9f:77:3a:cd:b4:33:2d:38:62:92:a3:d2:
6b:32:1a:97:4b:45:cb:bd:6c:a0:38:ef:87:85:61:02:fc:09:
a4:30:22:f0:5f:98:3d:93:a3:35:af:66:05:93:8e:bd:71:ac:
0b:a7:54:25:82:89:eb:83:fe:e5:31:1d:1a:87:a0:57:ec:08:
2d:7d:47:b8:13:2d:d0:88:40:7a:2d:da:38:f0:81:aa:ea:8d:
f3:ac:bd:a9:f5:01:d1:65:58:85:c2:93:db:91:d6:52:7b:44:
ad:83:be:6b:9d:20:75:f8:b1:1c:17:0f:21:09:a6:23:59:d1:
0d:55:fa:ec:65:15:ca:30:18:d0:7d:6a:25:3b:da:7b:0f:97:
2a:7b:ab:be:d6:ed:1d:35:bd:7e:c3:00:f3:1f:7b:70:61:a8:
f7:24:ca:48:82:fe:ff:b9:ff:ca:0b:00:15:e2:cc:87:ec:ab:
3e:b6:11:bd:96:12:99:7c:6d:ad:f3:3d:52:f1:16:d9:7f:1f:
22:fc:57:20:df:2c:2b:47:8f:e6:59:ee:bf:a9:1f:50:85:83:
87:ce:aa:df:8c:72:99:03:1b:6a:35:2f:32:00:ba:63:1d:f4:
ba:22:30:ad:b3:b9:52:31:f1:21:13:46:55:2f:95:a3:62:04:
cc:34:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:15:08 2025 by rpki-client