Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: DBrGzvL+0AqlOEdzg+gBtOLVaaekgTSfeZy4pC0AHO8=
Subject key identifier: 46:C9:5A:91:13:1A:9C:08:38:6E:E3:B5:7B:C7:78:95:79:79:24:92
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019A7301CC3A4E69E400F1C669DB67EB928F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 13:01:28 +0000
Manifest this update: Tue 11 Nov 2025 13:01:28 +0000
Manifest next update: Wed 12 Nov 2025 13:01:28 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: kUB6GomGFDxenwIp3a7fBxd3O4LcasUif8WgQA4m/d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cc:3a:4e:69:e4:00:f1:c6:69:db:67:eb:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Nov 11 13:01:28 2025 GMT
Not After : Nov 12 13:01:28 2025 GMT
Subject: CN=46c95a91131a9c08386ee3b57bc7789579792492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:6c:72:ec:ba:d5:a8:5e:aa:04:39:75:76:
66:42:10:2a:dd:89:76:ca:5f:8b:24:c5:29:d0:7a:
49:34:6b:b9:3e:31:1a:a9:7f:c4:81:e5:e2:9d:3d:
ca:79:a3:29:82:b2:d6:32:ff:8e:0d:32:8b:c0:a0:
b8:6a:89:26:b9:fd:5a:5e:44:2d:f4:7f:0a:f5:32:
83:90:7a:03:12:a2:11:65:1c:ab:66:f0:cb:71:f5:
d8:fa:20:d3:e7:de:54:44:e1:7a:4f:79:b6:7a:03:
85:b4:a6:ca:eb:23:ab:50:d8:4e:5e:c3:21:11:4b:
a1:c4:6d:61:67:8f:2e:20:d3:06:92:0e:c7:b7:e8:
05:86:e7:bc:6b:54:41:8f:96:b8:97:0e:49:65:ca:
f8:88:1e:33:79:55:d4:31:ae:3d:8a:df:af:e3:24:
fe:ef:54:45:52:ed:cc:e1:5c:42:6e:29:08:0c:71:
d1:a8:0c:0c:bc:75:fd:ac:29:fc:14:8a:fe:07:45:
76:67:09:15:cb:99:8b:6a:84:1e:6f:d0:cf:5f:6b:
94:6c:e7:be:87:c8:dc:5d:9d:6a:7f:5f:37:18:b9:
9e:3c:00:8f:37:a2:05:ad:06:60:33:31:fe:6e:09:
f1:14:5e:bf:ad:cf:6a:67:63:3c:d3:e1:8d:76:3e:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:5A:91:13:1A:9C:08:38:6E:E3:B5:7B:C7:78:95:79:79:24:92
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:1d:51:71:15:d8:11:13:8b:a6:0b:26:77:eb:93:f6:83:
bc:44:8f:4b:eb:63:c8:56:80:2f:c0:6e:94:0e:49:0f:c7:22:
1f:e6:e1:b2:1d:46:44:14:12:bc:c6:e4:35:67:66:e2:27:41:
2d:60:39:e8:c5:ec:01:d9:81:43:44:ab:ff:28:81:87:1c:aa:
bf:83:bf:e7:55:8b:e7:37:09:d2:4b:c3:8c:60:bc:a3:8f:30:
75:a9:b7:bd:3f:6e:df:d0:6d:5b:cf:79:b1:2d:a4:22:6d:ed:
56:69:1d:75:f5:7f:4a:96:d5:d3:ed:7a:84:79:41:fe:98:c8:
07:4c:83:0e:ba:07:b1:ef:4a:65:2e:93:51:21:9c:92:5e:38:
f5:f2:1b:4c:20:fa:56:24:25:d4:34:e5:5c:0f:ea:38:c8:7f:
58:ac:13:41:69:4d:5d:28:86:6c:ed:a6:b3:96:a7:8f:86:87:
de:7a:4b:a1:10:b7:62:85:45:88:cd:6c:2a:2c:1e:96:7a:c2:
7c:b7:06:ac:d7:d5:d8:6a:ec:d4:9c:e3:b2:6b:f6:d9:90:92:
51:a7:aa:17:0a:82:b1:19:a3:6c:99:20:47:3e:2a:8e:34:34:
3d:13:81:5c:28:53:35:5a:44:d6:67:f2:6d:21:4a:71:83:4f:
f5:56:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:39 2025 by rpki-client