Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: PVdB1v4Yy7wrt1yI3YnxFoc/oKQNQ/yuhq40BiciQeI=
Subject key identifier: 03:D3:CF:A4:C9:35:9B:8D:30:7D:F5:27:30:5B:DE:DD:CC:A4:ED:FF
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019A643385C030BF3A7CF1B4DE66F74ABE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1431
Signing time: Sat 08 Nov 2025 16:01:29 +0000
Manifest this update: Sat 08 Nov 2025 16:01:29 +0000
Manifest next update: Sun 09 Nov 2025 16:01:29 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: ohghWGgvVLh6mE5Zrze2/Z/c/aYPYncFGG3jiZ/iBFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:33:85:c0:30:bf:3a:7c:f1:b4:de:66:f7:4a:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Nov 8 16:01:29 2025 GMT
Not After : Nov 9 16:01:29 2025 GMT
Subject: CN=03d3cfa4c9359b8d307df527305bdeddcca4edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:36:5c:52:ac:76:73:c1:aa:cb:f4:3d:35:
4a:e7:d3:f1:9d:e4:95:89:58:65:0e:2e:32:f8:d6:
a5:bd:d3:34:27:45:b6:a2:40:79:11:fb:e7:62:21:
c5:58:b7:bf:4f:12:5a:a9:fe:2a:e2:1b:3a:49:39:
2d:ca:2f:1c:43:11:bb:97:80:f9:07:5a:f6:d5:c6:
df:20:db:8c:7c:ac:4f:df:62:e0:ce:4d:a5:f3:1f:
16:ef:db:f3:56:84:e0:19:b4:1c:a8:14:39:3f:c6:
2b:ff:8b:71:5e:57:c0:17:f9:f3:c8:39:8e:a5:63:
a5:35:5a:ae:21:3e:84:fd:fc:c5:70:74:8c:28:47:
07:27:1c:6c:c4:c9:93:76:02:0f:2f:d6:ab:82:bc:
9a:ac:31:e6:b2:c0:86:fc:2d:62:2c:28:38:6b:22:
b6:52:14:6e:a3:43:8d:34:ec:99:a7:ec:e5:9a:c6:
42:3b:7f:a2:a3:26:02:58:a4:18:af:18:5f:b2:05:
61:2e:39:31:b9:2d:79:e8:f5:b0:ad:cf:4a:c6:32:
c1:3e:49:34:66:ef:3f:3a:1c:30:12:f1:15:48:5f:
35:30:bf:f3:af:1f:29:ae:93:10:b4:58:19:be:5c:
00:df:64:d8:bb:5d:12:1d:0c:52:40:d6:c6:31:1b:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D3:CF:A4:C9:35:9B:8D:30:7D:F5:27:30:5B:DE:DD:CC:A4:ED:FF
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a0:7d:0c:e0:ab:47:6d:1c:a4:9a:48:17:f8:72:4d:3f:28:
9e:5c:d6:0c:50:c1:a0:aa:a5:17:e8:2d:d8:0f:d6:c6:3c:c9:
b0:c2:3c:37:6c:25:1c:24:ae:68:cc:30:a4:6f:c5:dd:1c:10:
f3:4b:13:bb:6b:8a:e2:3e:91:92:79:a9:a2:56:8b:c8:45:29:
91:95:7e:88:1d:2b:f8:9f:1b:e7:b2:86:3b:84:4c:78:97:e5:
21:61:ba:1d:c2:c0:47:3a:c1:26:14:47:73:68:ee:65:0d:fc:
9f:d5:ac:cd:36:07:e2:8c:93:2d:ce:72:93:85:81:8f:94:f9:
8e:1d:1a:15:d5:41:98:47:b2:38:13:fb:28:b8:f6:fc:c6:68:
09:2f:a5:d1:ff:2b:b7:f5:34:84:f7:c7:b0:25:ba:5f:2f:58:
1e:55:06:ae:d5:a6:64:55:08:f9:f0:d3:f8:49:09:4e:29:82:
5a:11:3e:83:af:3b:c1:1d:47:4d:62:4d:14:a1:e9:73:59:91:
76:b4:d4:6d:4a:06:1b:c4:13:df:5b:31:9c:9c:9c:3b:cc:8d:
5d:b4:cf:9b:d9:89:1d:51:54:fa:65:fb:8f:56:cf:2c:e7:50:
fa:b3:53:46:47:0e:dc:da:8b:78:aa:75:bc:db:21:c5:3b:03:
54:2d:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:10:42 2025 by rpki-client