Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: Oq3QPoj+DJMmyIImfEI4H3UWZhVkxXUU8+KVXHKIKD4=
Subject key identifier: 5C:CB:1B:BA:58:DD:91:21:5C:B1:38:AA:75:76:A9:4A:3B:CD:76:D9
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 019A71B7AFF43FB13765FDCC4A880A60AA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: Dj3UTHr+TaTovWLW8fXxU+XmsL4j/g/LFe3g9ml4Jdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:af:f4:3f:b1:37:65:fd:cc:4a:88:0a:60:aa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=5ccb1bba58dd91215cb138aa7576a94a3bcd76d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:86:f9:bf:73:7a:cb:fb:04:bb:31:30:83:
a0:bb:ce:54:7d:7a:b4:15:1e:e1:d0:b2:25:f3:92:
28:a1:f3:2f:8e:1c:2e:26:54:9e:eb:96:38:71:18:
53:9f:80:ce:03:46:01:44:1e:06:36:f0:8f:de:72:
ad:83:4d:39:38:75:32:f1:27:bf:47:a7:94:88:4b:
f3:7e:6d:09:d9:7e:47:1d:cc:9a:26:c8:90:a7:a0:
60:e2:83:e2:44:81:c7:40:ec:67:ee:9c:78:56:7d:
45:52:56:df:25:ec:73:a1:4f:e0:6a:74:10:7c:45:
2f:a8:f3:68:4d:84:2a:b3:31:96:d9:b1:4f:4d:29:
dd:64:af:9c:96:26:53:b5:c6:0a:11:46:68:d5:0f:
f3:6e:82:99:09:f1:57:51:95:36:82:f5:e2:47:ae:
ae:fb:8d:83:07:5e:ca:77:9c:b9:f5:b9:14:9e:33:
5e:c7:bc:94:62:89:84:7d:2a:26:9f:8b:42:27:1d:
1e:f3:87:3b:88:6d:eb:86:76:83:c7:5e:c3:c2:3a:
d8:d6:62:02:98:ae:a1:bd:6b:cb:c4:65:97:ab:34:
ef:62:ef:b6:e3:46:0e:4f:5f:e2:88:50:ad:32:4f:
f7:c5:c5:4e:52:c6:a4:97:aa:2b:85:f6:ec:e1:4c:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:1B:BA:58:DD:91:21:5C:B1:38:AA:75:76:A9:4A:3B:CD:76:D9
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ab:9e:90:5f:79:d8:6e:c4:bc:ec:1a:39:3e:41:ca:e0:6c:
08:66:09:e5:2a:f4:bc:30:63:43:3e:0a:71:8c:5e:26:28:b3:
d8:36:fc:6d:f8:88:7b:24:df:48:2c:79:50:0e:fa:40:73:f3:
97:d5:34:8e:2e:5a:73:59:8d:73:cb:24:01:49:d0:85:67:26:
e9:4b:19:2f:70:64:88:39:ae:79:8c:d4:2a:6e:19:b5:2c:40:
9d:9c:f2:c8:0b:16:08:9e:c4:8a:65:45:f2:62:9a:7f:db:40:
ef:7f:3a:e1:c2:b9:6c:16:a6:ef:6f:34:7a:9d:1f:71:cd:5b:
8f:12:57:6f:42:11:22:82:12:59:e5:ba:ce:e7:b0:9f:89:7b:
e1:f6:5e:d0:97:14:76:f9:1d:80:d8:b9:84:83:6e:bc:c5:6f:
a9:c1:2d:26:9f:ef:8b:63:d7:56:f4:8d:e5:18:b5:53:cb:7a:
f1:0d:7a:16:31:58:66:8b:b0:09:f8:74:ba:3d:32:37:c2:d3:
1e:d4:0f:70:2f:1a:8e:a7:41:bc:2b:e7:bb:4f:be:75:cd:14:
2f:d4:42:0c:a4:09:84:1c:c5:40:07:17:39:de:19:8f:f4:cc:
f3:7b:21:8f:81:22:da:49:69:c6:be:71:70:53:9e:fe:18:e9:
03:bd:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client