Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: UOoz/WJ5RyJYpA3HDbeEDfzPnRVuL29/CeT8UReBTFk=
Subject key identifier: 8E:1B:69:D4:06:B1:52:56:02:57:1D:08:5D:9E:C8:A8:D2:80:DD:F5
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019A7225D751A063954D02AA4E6DBC3D464A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0D04
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: kw7SGxpbo0pNKAW0UJak4ecHSpB8RMHAXznVZe11jDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d7:51:a0:63:95:4d:02:aa:4e:6d:bc:3d:46:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=8e1b69d406b1525602571d085d9ec8a8d280ddf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:52:02:ff:8a:c6:e0:f6:5e:17:57:aa:f8:
eb:5d:ba:12:15:ac:e8:d4:cf:7d:9f:f4:ce:cc:67:
29:6b:de:a1:3a:74:38:28:a6:4b:94:3c:b0:ff:ea:
28:79:16:61:b6:1e:1c:3f:a9:3f:89:53:9b:59:a2:
14:3e:ad:ba:7c:09:57:d4:6a:0d:65:4d:89:4d:f0:
42:de:a5:c0:c3:ee:6b:41:f6:86:1a:31:c5:33:92:
b3:7b:ff:cd:df:73:05:d1:70:0c:29:fe:14:8c:1e:
56:d7:cd:df:eb:5f:f1:11:17:67:86:45:d4:64:92:
f8:29:b9:3c:d1:1c:77:57:5e:47:21:f5:8e:e0:93:
17:8c:6e:44:f3:20:f7:0c:87:dc:2d:04:7a:34:d7:
bf:17:38:19:09:55:6e:24:11:2d:b8:68:00:62:de:
0c:92:77:90:71:29:86:5b:47:84:3d:e6:33:1c:f8:
68:f2:35:aa:d7:47:92:c8:27:df:be:68:be:67:d2:
a6:e9:bf:8b:71:25:f2:d1:95:5e:54:6d:cf:e7:bc:
bd:4e:36:f6:06:0e:9e:4d:07:a5:fa:77:7d:ce:42:
c4:2b:15:4c:7a:4a:bb:74:b7:dc:65:81:b5:14:4a:
53:88:f9:52:90:3f:78:25:c7:86:36:81:64:1b:89:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:69:D4:06:B1:52:56:02:57:1D:08:5D:9E:C8:A8:D2:80:DD:F5
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a2:95:2a:a0:4d:31:95:e7:1e:c2:89:83:df:36:3a:d0:25:
07:04:5b:f3:9e:77:f6:e0:fb:64:9d:34:73:d5:a5:12:00:f6:
ea:3e:6e:30:ac:5c:05:0f:ba:1d:23:3f:e8:b4:60:82:13:78:
06:71:24:17:11:3a:6f:cc:7d:93:30:a9:d8:1c:2d:47:72:48:
93:c8:50:23:0a:0c:f2:d9:ef:29:fc:94:d9:14:05:02:26:64:
3d:92:7e:85:31:e5:b2:63:4a:71:cc:b0:82:8f:f5:a0:e8:76:
7d:a0:cf:04:4e:9d:02:df:f3:c8:8d:aa:de:d9:f3:db:d8:96:
82:ac:3b:b4:0f:d0:e7:77:76:65:76:4b:c3:66:76:8b:3a:fd:
5a:48:3a:c9:04:0d:88:e9:ae:00:60:aa:fc:60:e2:a6:09:90:
9f:84:27:81:f3:69:13:e5:76:1b:b1:34:ca:a5:e7:cd:9d:a3:
7b:96:2b:12:98:6b:96:25:aa:71:95:6f:1c:1d:44:19:69:55:
1b:e4:c4:ad:90:72:0a:20:0d:65:a5:7c:bf:98:96:ee:d3:92:
3c:17:4f:2f:0b:ec:ec:05:ce:e4:b1:0f:69:c1:c7:0b:8b:a7:
5a:8a:20:c2:7d:67:8d:78:f4:14:c0:3e:e9:82:61:83:64:2e:
40:b3:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:34 2025 by rpki-client