Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: K34KDI/ZeCO6ntZXkpyRvhTjftW+rSn9MTlU2Y+SEwQ=
Subject key identifier: AC:AA:24:A5:8F:8B:20:5F:5F:57:B9:72:15:0A:1D:22:2A:FD:2F:77
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01996359E35F90BAC42C1ADC7DD2BFD2EDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 13AC
Signing time: Fri 19 Sep 2025 19:00:59 +0000
Manifest this update: Fri 19 Sep 2025 19:00:59 +0000
Manifest next update: Sat 20 Sep 2025 19:00:59 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: Zwx/hd8RcTdFg8xi2mUWcdopt/raOUi3P1L9T/yBpOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:59:e3:5f:90:ba:c4:2c:1a:dc:7d:d2:bf:d2:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Sep 19 19:00:59 2025 GMT
Not After : Sep 20 19:00:59 2025 GMT
Subject: CN=acaa24a58f8b205f5f57b972150a1d222afd2f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:95:5e:bb:27:05:35:a9:3a:99:f2:9d:e8:
8b:bc:ad:74:33:8b:b4:6c:b5:38:4a:8c:a4:5a:9a:
72:c9:e5:33:31:fe:76:53:7c:b3:57:be:c0:37:29:
35:5c:63:cc:7b:bd:09:16:8e:27:cf:25:65:ee:4e:
90:19:a9:0f:25:f1:76:79:f2:0b:93:60:05:c0:76:
42:5e:87:65:9e:61:81:e9:31:8c:be:aa:1c:07:90:
3d:10:76:ff:50:06:f7:40:cc:51:d0:81:41:b9:2d:
7f:ba:3c:bc:90:ed:33:d0:5c:99:21:67:1f:f4:e2:
50:a0:3c:84:73:b0:f1:d8:97:02:c5:09:d6:57:27:
6d:1a:09:d3:67:89:e0:81:08:e3:82:e7:54:2a:a6:
43:66:79:b1:54:b0:3b:5a:bf:df:f3:de:77:7c:6f:
bb:e2:0a:00:f1:e5:db:ec:46:d0:04:49:0a:95:f7:
78:b0:ee:73:d8:1f:60:4c:68:b0:c5:b2:04:98:a4:
ca:e0:d2:8f:1b:1d:68:2e:80:8f:b4:2b:54:bc:7b:
e0:21:7c:c6:1f:64:51:9b:30:8b:42:a2:85:b3:27:
73:1d:a9:96:46:30:d6:14:c4:a3:23:5f:08:19:3e:
e2:a3:87:59:00:97:41:85:62:35:65:d8:b8:1f:77:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:24:A5:8F:8B:20:5F:5F:57:B9:72:15:0A:1D:22:2A:FD:2F:77
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:f7:5e:92:1f:26:58:84:de:fc:9c:9f:99:c5:a0:c7:f8:
ad:77:75:32:1e:3a:99:6a:e4:15:9f:ad:39:95:22:9a:6f:8a:
5f:0c:5b:3e:67:9f:b4:9f:bd:8e:1a:3c:25:3d:c7:43:3c:c5:
78:5c:40:da:ee:27:eb:3c:b1:85:b1:c5:41:9d:46:24:3c:6d:
db:87:12:b3:b4:14:ed:6f:2d:71:d7:5a:f6:49:cf:50:0e:aa:
3c:a6:8d:56:b9:2b:6c:ed:1e:14:20:c5:17:73:0e:59:d2:81:
b9:50:d8:44:6d:55:61:e8:51:ab:89:f0:37:d3:a1:53:53:48:
5f:a6:6d:6c:bd:23:89:1b:56:a1:6f:8b:e7:56:19:cb:56:e7:
3e:7d:dd:36:c0:13:91:e3:7f:77:56:e4:bf:5e:13:54:34:75:
e7:71:cb:3c:0b:fa:30:84:52:ac:dc:49:7e:95:eb:30:6b:da:
24:3c:e4:ed:cc:cc:b3:94:d2:ca:26:98:ce:ca:81:8f:2b:b0:
56:8c:a5:67:53:4d:2d:5f:48:dd:39:b4:9d:6b:74:f2:6a:f6:
3b:11:d2:94:9a:68:6b:de:81:bf:f0:c7:15:eb:97:d8:a8:32:
66:7d:85:d5:cd:f1:a0:7c:70:a9:65:87:df:02:46:96:ba:76:
17:11:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:37:37 2025 by rpki-client