Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: p4abwoPEDNdtQXlyeDvgNecRsBND1KxJeJyLABlWqZg=
Subject key identifier: DB:DE:D9:DF:8F:14:26:1A:34:1D:5C:6F:55:F6:34:CF:66:18:61:A0
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019A22F7283ABD01E98C13C51FDA94EE022E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0EC3
Signing time: Mon 27 Oct 2025 00:00:14 +0000
Manifest this update: Mon 27 Oct 2025 00:00:14 +0000
Manifest next update: Tue 28 Oct 2025 00:00:14 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: oKXtZjxlehIIZ41JUQWuSak1Q3iFtTnS/eIB27RPUWM=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:28:3a:bd:01:e9:8c:13:c5:1f:da:94:ee:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Oct 27 00:00:14 2025 GMT
Not After : Oct 28 00:00:14 2025 GMT
Subject: CN=dbded9df8f14261a341d5c6f55f634cf661861a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:fa:19:a2:e7:38:0f:e3:81:7d:c8:94:17:
8e:f8:9f:9f:cf:65:2e:ea:9d:87:4b:b6:34:8b:75:
ed:06:29:fb:13:b0:b8:6f:6e:71:77:f9:7a:55:9a:
f4:c9:07:94:dc:7f:19:35:15:51:70:ec:12:b1:1d:
0f:6b:7a:85:f3:0d:c7:b4:d6:c8:e3:0b:ae:a0:b3:
09:24:fd:b0:25:29:b1:d8:15:3c:84:7f:af:44:30:
03:9c:bf:78:59:33:0a:69:4e:db:e9:20:cb:7f:98:
07:33:b5:5a:93:56:f8:25:6f:ca:39:d3:46:af:a9:
60:f0:0c:7b:5b:b5:ff:0c:09:b4:ad:c8:f8:c4:42:
70:fb:14:18:67:e8:35:5a:84:b6:87:4a:c9:2e:bc:
3b:09:e4:c4:04:26:80:f7:a4:e5:fb:d2:9e:e4:22:
cb:b0:76:cb:69:e9:4e:4a:d2:07:29:30:a3:09:d6:
8e:34:7f:16:b0:37:65:c6:2b:40:09:03:56:d9:65:
a3:41:f8:e2:41:f8:53:02:31:50:4a:b6:7c:de:9e:
a8:79:5c:d8:36:d4:c4:68:f5:a2:1e:c6:3f:46:69:
65:59:bb:6c:d5:7b:d7:d6:c3:43:bd:4c:0d:4e:07:
9a:2c:c2:d8:04:29:62:46:c4:c9:f6:83:e8:bf:20:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:D9:DF:8F:14:26:1A:34:1D:5C:6F:55:F6:34:CF:66:18:61:A0
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:61:b0:1b:2c:94:e7:ca:9c:21:31:25:fd:72:3d:81:c5:
0d:ca:93:d4:97:07:c6:e4:17:99:d1:65:51:10:9a:83:81:cd:
29:e4:82:fb:54:9c:46:9d:7a:5f:62:65:1c:02:a0:b2:cf:49:
34:16:a4:2d:07:57:fb:d3:ba:d7:51:7e:0f:8d:94:5b:de:22:
58:1a:7b:8b:5f:3d:75:70:e8:88:e8:f1:f8:c6:6d:a6:77:8d:
51:de:2e:27:15:fc:3c:d1:75:e4:a7:0c:4c:65:af:5a:e0:6c:
30:0b:87:9a:23:18:e1:02:dc:8b:32:34:a4:8b:64:35:6b:30:
ac:fb:3e:c4:bc:f4:c7:66:79:1e:d3:39:3b:34:5a:31:78:9d:
12:f8:0c:11:6e:1e:d0:5b:a8:5b:b1:f4:dd:27:0e:2c:11:4e:
09:86:a3:3b:b6:1e:ce:88:e1:61:5d:6f:7d:c2:dd:d8:c0:b6:
3b:c0:fc:ce:b5:fb:19:0e:95:c4:06:dd:92:a4:71:e2:94:1b:
97:81:c2:c8:45:9f:4d:e4:d3:ec:38:3b:0b:93:c0:66:c2:e5:
78:2d:64:10:8d:15:6a:ac:78:3f:9f:aa:0c:d9:cb:08:6a:7d:
cd:96:80:68:0a:57:6d:a6:d9:0e:c5:e9:12:4a:87:cf:31:9e:
3c:77:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:23 2025 by rpki-client