Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: SrptpeEA++Wjr7pTsH6iHULHL6tidTacJjHXZwCb020=
Subject key identifier: A7:EA:1D:4D:B6:9D:FD:B4:C4:46:26:A9:EC:24:07:21:89:E1:BF:34
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019A70A4F0ABF4C0B59075C4B27AE7C49AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0481
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: iQO8Y0iU9TwquvZVqeOCN+SgcasaWqHVM+MGiLiDg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f0:ab:f4:c0:b5:90:75:c4:b2:7a:e7:c4:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=a7ea1d4db69dfdb4c44626a9ec24072189e1bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:00:6b:cd:d3:ac:61:4b:e2:82:fc:36:b5:
e8:4c:79:87:3b:08:f6:5d:28:38:5f:fb:ed:1b:a8:
1d:60:f9:8f:ec:48:fb:69:4e:d7:4a:95:e0:ce:41:
de:6c:e0:48:48:7a:eb:f4:0b:af:97:ef:31:12:13:
78:59:b0:df:38:9e:c2:c5:9e:18:ed:ba:6d:0a:04:
e3:ff:cb:fa:8c:f3:36:52:64:09:a2:50:dd:75:e5:
54:f4:30:f0:85:ea:4f:47:05:a8:1d:ae:5f:58:63:
bc:e4:ec:15:17:7a:2f:85:e3:72:93:57:62:64:54:
c5:14:98:86:60:7e:5b:6a:99:a4:00:50:14:ac:69:
6d:dc:2c:0b:51:b0:01:31:47:f8:b2:2b:7a:b1:35:
d2:73:41:fb:8a:43:19:02:29:46:40:79:fc:47:aa:
09:7b:a0:50:c7:ed:9f:ec:b0:06:47:c4:c9:2b:2c:
8a:8f:fc:5a:1e:61:db:18:ff:9e:8c:9c:2b:3b:63:
af:67:7b:05:d9:d5:e3:a2:94:19:18:98:a9:09:8e:
e2:7a:15:09:3c:c9:4c:9e:d5:76:6a:fb:11:a4:b7:
96:e8:c6:00:16:fd:b2:bb:5e:37:1d:a5:94:87:70:
b8:65:fb:a2:b0:17:ce:9c:19:f5:ec:08:e8:b4:30:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:1D:4D:B6:9D:FD:B4:C4:46:26:A9:EC:24:07:21:89:E1:BF:34
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:62:6b:dc:fb:74:7e:8c:2d:23:be:1f:fd:d6:03:40:a2:
d5:55:f9:41:4a:46:55:9d:d1:7f:5e:9d:b7:4d:f9:da:ac:1e:
61:75:f8:d8:2a:03:3b:1d:7c:35:94:3a:4e:03:4d:70:c3:a7:
fb:d6:78:63:99:56:d4:90:9f:fe:90:95:e4:db:fd:e5:de:90:
b6:9f:68:f6:22:e5:61:fd:b8:a3:ad:71:47:23:a1:ee:d4:b4:
30:82:f2:a4:02:76:60:e8:dc:a5:68:38:8b:3c:30:3c:27:05:
d7:3c:77:83:56:a2:d7:20:4b:ff:cb:e0:0b:38:3f:33:41:50:
a4:99:22:0e:4e:46:a5:83:d8:ec:01:1a:ff:3e:e6:05:6a:95:
a6:86:86:43:96:2d:8c:b2:01:26:1f:5f:b8:d4:d5:b8:aa:fa:
43:b5:34:d1:ed:e5:88:ed:bf:79:db:99:21:cf:81:0a:c9:52:
ea:d5:45:e6:c6:e0:d4:cb:31:38:40:a8:c7:6f:5c:9d:29:1d:
43:e6:80:b2:a9:86:76:61:ab:6c:25:fe:f7:7e:ee:d7:b9:9c:
61:64:fc:0a:7e:68:40:52:34:e6:d6:41:32:3d:43:a5:e4:c4:
66:e4:1c:56:6e:81:6c:70:0e:01:71:26:f6:be:41:2a:d7:33:
6a:ce:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client