Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: yAqNQGbRKpaldw/UEYT5Vq8Nrf8jONv9V+8g/2RYMx8=
Subject key identifier: C3:B1:C0:5F:A9:87:81:72:EF:C0:2C:2D:0A:FC:8C:73:32:C5:2D:B3
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019922FAA59EC68AFB1B2B51DDC6A4840563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 07:01:15 +0000
Manifest this update: Sun 07 Sep 2025 07:01:15 +0000
Manifest next update: Mon 08 Sep 2025 07:01:15 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: 1jlFs2L/yJJ7QakHaimpKHrojEdSp1MaabpyoOqfT0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a5:9e:c6:8a:fb:1b:2b:51:dd:c6:a4:84:05:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Sep 7 07:01:15 2025 GMT
Not After : Sep 8 07:01:15 2025 GMT
Subject: CN=c3b1c05fa9878172efc02c2d0afc8c7332c52db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:c4:e1:20:55:94:45:a6:e2:d1:59:94:1e:
fb:ae:a7:4c:d2:be:a2:44:fb:b3:53:83:9e:40:6e:
36:0b:d0:95:24:a5:43:00:de:72:26:07:bd:d9:ee:
91:c3:0a:68:57:2f:03:45:53:fd:44:86:88:b5:ef:
01:6d:e7:49:45:fe:2a:78:97:11:f3:bf:1b:c1:f8:
8d:1d:93:72:08:87:4b:02:3b:57:e2:a3:97:66:8b:
28:50:f3:3f:ce:a9:c2:e8:1e:7e:35:a5:53:b0:f4:
2d:b7:60:9a:53:17:00:de:8a:3c:5e:7a:02:0f:9b:
b8:8d:a4:fb:89:7f:26:a2:cc:94:04:69:0a:13:6f:
a9:70:5e:24:e9:37:8c:ad:d0:f3:c9:8d:9f:b2:80:
1e:43:a5:4d:d5:4c:c3:6f:6e:de:36:d8:70:6c:fe:
82:ae:77:99:bf:b7:63:a3:82:15:8d:bb:a2:27:35:
c7:82:7b:ab:94:33:ed:33:77:ad:50:d9:3d:71:52:
b2:d8:3c:ca:bf:ba:68:95:05:26:ef:6a:24:d5:44:
9f:4a:92:1a:c0:f3:7a:26:ce:e0:73:a9:cc:76:50:
75:10:0a:7a:aa:b6:29:26:bc:10:d7:0d:91:54:6a:
76:fa:1f:85:8f:3b:13:e7:6c:64:e9:82:d8:d9:8f:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:C0:5F:A9:87:81:72:EF:C0:2C:2D:0A:FC:8C:73:32:C5:2D:B3
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:8f:4a:89:53:58:ef:53:4d:e8:ae:07:a8:4a:ee:9d:a7:
41:32:1d:17:3a:03:1e:ab:c7:2e:d3:d2:a5:d8:bb:26:4d:9d:
78:84:df:9d:6d:cb:17:9c:80:52:dc:42:df:88:91:d0:ee:a6:
0b:82:a4:fc:e9:51:32:8b:92:9f:05:a8:60:79:c2:df:4a:eb:
34:28:96:a4:b3:60:50:88:d9:96:8a:43:28:ea:59:3c:1d:6d:
99:a2:2c:dc:e6:15:6d:82:4b:40:99:bf:87:78:be:a5:3c:69:
34:74:31:63:39:60:48:b3:77:26:5b:64:76:19:58:bf:66:de:
aa:64:1c:f8:fe:65:87:49:ef:7a:cd:80:8f:6e:43:30:21:da:
7a:08:b5:ac:3e:a4:9d:18:4f:da:a5:35:c1:10:e2:69:ec:76:
06:a1:b2:98:c3:c4:64:1f:9a:6b:0f:e7:84:f5:38:53:b4:79:
a6:1f:c3:fc:76:99:61:ec:7a:c5:ad:8a:83:0f:9c:ea:b4:8c:
e9:fb:8e:3e:b9:d6:15:d9:09:d8:1f:5c:15:e9:af:9d:e0:db:
37:47:09:bc:7e:bd:3a:c1:ab:7f:a4:a0:fc:e9:84:88:15:a6:
36:6d:8d:32:19:b3:24:24:26:20:dd:b8:f5:0b:70:13:8c:32:
17:fe:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client