Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: GrVAFWdGbtScoR3ETLhoG5a43achPXbPXUvQYhcs9iI=
Subject key identifier: 69:77:7D:DC:A4:02:62:76:0C:A2:24:99:6A:3F:6D:28:9C:AF:D6:BB
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019A7149BFD89F1631AB8E78281B328E5DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0B89
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: r1HnI+Esa8So5aG911Mc3SgzwjG+X+m+N5l3TOtdwck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bf:d8:9f:16:31:ab:8e:78:28:1b:32:8e:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=69777ddca40262760ca224996a3f6d289cafd6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:73:e4:d6:92:86:cf:56:c9:c7:28:51:04:
bb:e4:09:b7:5d:c1:27:2a:c4:80:f2:f7:87:e5:c6:
6f:42:4b:4e:46:74:e8:d5:d8:80:7a:5a:8b:b2:de:
fe:b7:cd:16:42:5a:02:1a:00:17:74:08:15:dc:2b:
ec:b3:75:f2:99:ec:88:c2:47:72:f7:70:71:83:59:
6f:2d:c0:03:e1:3a:09:aa:72:b3:57:5e:95:00:c5:
48:5b:af:d8:45:9c:f9:a1:e5:2b:50:4b:ba:94:11:
84:59:af:8f:19:c3:92:6c:b5:64:c4:62:d4:b1:c8:
77:42:65:66:30:14:1b:56:ec:c4:c7:21:48:2c:bc:
6d:bd:f0:57:02:7c:a1:6d:15:02:c6:3c:a4:96:82:
f6:a5:a6:40:ac:20:9f:6d:a3:c4:56:2f:05:0f:c0:
29:d9:77:9a:f1:b6:fb:88:71:3e:2a:b3:ff:e9:4b:
20:a1:eb:f1:14:ea:2e:5a:ce:d1:7e:72:c7:19:86:
93:e3:6b:ae:61:c7:4f:27:02:26:bc:93:50:85:78:
4f:15:52:6a:a6:f4:82:b5:05:95:14:c4:e8:73:df:
30:d0:97:b3:07:41:89:27:1c:1e:d0:58:c2:a6:ea:
4b:f2:8a:72:5f:36:24:45:93:f8:17:00:5a:e0:33:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:7D:DC:A4:02:62:76:0C:A2:24:99:6A:3F:6D:28:9C:AF:D6:BB
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a5:1f:4e:bf:13:9e:6c:c1:c5:29:94:fe:ab:e1:40:86:16:
55:56:03:ed:e5:e6:a3:37:5f:d1:01:6c:30:cd:0e:33:1d:ad:
b1:36:9b:19:8c:29:b6:19:67:69:f6:5a:ec:66:91:f3:a7:62:
1f:a8:6f:15:87:29:07:6c:fe:b4:8e:5e:d1:4d:06:dd:b3:1a:
ce:d6:33:5b:4a:3b:b4:77:e0:bf:1d:62:2f:89:60:a1:9d:2b:
56:27:61:c2:d9:dd:b9:1e:d3:29:1f:0e:a1:d4:e6:56:49:d5:
d4:3e:9e:02:52:a1:96:5a:85:cd:8d:88:92:2b:c6:e4:5d:d9:
a2:33:83:50:93:24:1c:e6:df:01:c8:47:08:8a:97:2f:13:92:
e1:53:c1:a6:96:89:28:8e:00:28:76:2e:7a:38:a4:37:28:fe:
f8:16:20:93:02:0b:fb:0a:22:99:ea:0b:24:10:ad:33:99:dc:
fe:c7:24:3a:3f:08:7a:fc:b5:da:46:fb:af:6f:6e:f7:f9:85:
0f:dd:33:a4:94:a0:13:c8:3c:10:2e:99:4d:3a:5a:87:86:32:
77:62:ae:0b:ef:8f:70:2c:68:b3:8f:b8:d6:69:f3:e5:c3:51:
69:8c:ed:6c:7a:30:49:65:71:dc:b8:66:42:54:d2:3e:76:c0:
6a:a6:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client