Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: pZUfPBkiPCGezzgAWBlANBeaxIlu1tjwkGUt4nG8s08=
Subject key identifier: EB:85:55:A5:C7:8B:6B:B5:94:D7:43:B7:9A:E5:E6:E3:50:71:0F:94
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019A213FF8BB0B87DC211B409E69515AD0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 16:00:31 +0000
Manifest this update: Sun 26 Oct 2025 16:00:31 +0000
Manifest next update: Mon 27 Oct 2025 16:00:31 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: D6xnd7q+6oYbbRuIvOEtSNsF/0bk2YfURVh8ygwSZaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:f8:bb:0b:87:dc:21:1b:40:9e:69:51:5a:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Oct 26 16:00:31 2025 GMT
Not After : Oct 27 16:00:31 2025 GMT
Subject: CN=eb8555a5c78b6bb594d743b79ae5e6e350710f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:6b:5b:f9:71:cc:7d:14:50:25:b9:3f:d0:
b7:6d:08:a1:3f:35:98:86:d2:f8:76:a1:b4:ba:e9:
73:a6:74:35:62:d1:9a:86:ed:a6:3c:25:dd:9c:63:
91:f1:a8:37:c4:48:f9:0e:b4:4c:47:ae:c2:c4:3a:
cb:9f:37:f6:10:e9:61:dd:9c:4c:2d:e9:5f:7f:8f:
c3:12:d5:f2:e0:e9:af:b4:6b:a7:05:b4:da:c8:2e:
f4:20:0f:3e:b1:be:85:7c:89:f6:0d:3a:5e:10:ea:
54:c3:17:3d:d8:93:50:ce:1f:5a:1f:bd:3b:47:12:
f2:1e:c0:61:2c:b7:5e:07:d2:89:87:21:51:03:4d:
a1:5c:66:69:c7:1e:59:0c:30:76:31:fb:11:10:88:
1d:63:41:32:e7:d1:ad:e2:8b:06:80:e1:0b:3f:01:
02:6d:3c:33:ef:60:d0:8b:40:e8:5e:81:2b:8e:1f:
53:52:4f:c3:0a:78:8a:49:2e:d8:78:b1:6a:50:2f:
27:b4:bd:92:30:7d:e7:3e:41:b0:52:f5:d8:70:a0:
3a:ad:20:a4:3d:a1:8b:4f:1b:05:ef:98:d4:ad:6e:
72:13:45:eb:7a:2f:3d:28:aa:7b:9d:65:d1:a5:06:
56:13:3c:83:7a:4b:19:c2:2c:22:5d:ab:77:f8:dd:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:55:A5:C7:8B:6B:B5:94:D7:43:B7:9A:E5:E6:E3:50:71:0F:94
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:50:ba:70:b4:b7:44:d2:fb:e5:59:55:99:28:5a:92:b0:13:
d3:97:33:4e:68:d2:f8:2c:d1:3e:4f:55:33:fb:b5:c8:f7:5d:
37:89:84:05:de:ac:6a:47:fe:68:a3:39:c0:ef:cc:7a:3e:93:
f9:38:b3:f2:a4:61:f0:e5:e0:27:04:cd:f9:c4:5a:bf:ea:09:
dc:0d:17:c9:f4:2c:3f:1e:5b:95:08:cd:4a:ed:ad:a6:75:d5:
d8:86:3c:5e:eb:13:b0:bd:66:2c:49:94:c9:a9:b7:5c:6e:6c:
9b:b7:7b:0d:1c:51:f7:08:30:bd:19:88:28:d0:18:2f:63:d1:
fe:ff:ef:c9:2a:dc:24:66:60:8e:8d:a0:7e:5e:00:2c:e2:9d:
f6:f5:b4:9c:37:8e:c7:0b:1b:21:8b:dd:61:94:4f:3b:31:44:
5c:5c:a5:65:95:b6:5c:2c:82:a1:63:81:3f:51:49:71:c0:2e:
d2:15:c0:d6:e8:5c:1c:32:f4:9f:5d:17:ba:f1:a4:4c:15:e8:
ad:73:53:93:ef:e4:4b:ff:39:89:92:7a:ea:e5:7c:91:df:71:
42:24:17:d4:fe:6c:51:4d:4c:1c:46:03:71:92:2f:82:c4:93:
b2:43:fd:f5:6b:fc:c5:33:07:fd:f5:bb:36:3c:63:02:33:41:
bb:b4:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:41:41 2025 by rpki-client