Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: coRxUoZB465aMrNYi4J/u7ZfmLVT8WwyEcOnx57x1k8=
Subject key identifier: F7:BD:A7:79:A5:B7:DA:48:BA:83:32:7A:51:78:16:DF:E4:B0:A9:9C
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 019A70A598C1D49D970CE0C1AC6F15A6DB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: LGeGuy3RbNIDzidFCsZ9zwkf1FKqzML58mBKolv6qgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:98:c1:d4:9d:97:0c:e0:c1:ac:6f:15:a6:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=f7bda779a5b7da48ba83327a517816dfe4b0a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:cc:c4:2c:8c:57:59:9a:69:b6:0c:46:29:
3b:fc:5f:bd:7f:46:f6:f2:fe:4a:b1:9a:30:bd:7d:
39:5f:d8:f1:2c:b9:8f:c2:ca:8b:d2:b6:05:fd:83:
24:7a:3b:fd:2d:03:01:d7:17:a0:39:92:fd:b1:da:
c9:bf:30:26:53:5e:4e:ce:1b:d4:6f:0c:95:f1:51:
b4:9c:8e:69:1d:d4:75:5b:79:d1:80:9c:1d:c0:d6:
da:98:55:81:75:43:16:73:ee:e2:b1:14:1a:94:13:
3f:48:94:30:95:cc:d0:a6:77:53:98:5b:e9:f2:79:
f7:f9:b9:6a:42:51:c0:b1:29:e8:44:e5:75:d8:c0:
b3:b3:4c:3f:9a:64:6e:92:da:e7:c5:1b:fa:be:55:
2a:b7:b7:b0:79:04:f7:76:a2:eb:4f:29:44:2c:1b:
d1:70:8a:b3:13:62:27:96:02:0a:1b:64:2f:0d:81:
50:3f:5d:4d:d6:4e:b7:84:69:b3:8a:73:0f:a1:59:
50:59:f1:79:17:3a:09:d7:23:14:37:f7:40:00:0a:
86:59:b6:1b:03:47:9c:33:26:a5:74:87:77:b1:1b:
30:de:04:1e:bb:3b:67:3c:dd:a5:22:49:f4:80:37:
2d:b7:19:92:aa:d4:41:70:2c:2d:dc:53:8f:f9:58:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:A7:79:A5:B7:DA:48:BA:83:32:7A:51:78:16:DF:E4:B0:A9:9C
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0a:05:ce:3d:74:89:99:85:4f:26:13:3e:06:c7:5b:38:fa:
27:7b:e5:5d:00:be:f7:8c:17:1e:e7:7b:32:b6:32:31:f7:64:
3d:2a:af:16:bd:df:74:72:e1:d1:08:eb:a6:31:b1:27:18:c4:
db:53:b4:6d:27:c3:ea:9c:02:b7:2a:00:10:3a:bd:84:ad:ce:
43:dd:f6:3c:a4:f6:0f:93:f4:81:26:16:93:ea:ba:71:0d:0b:
40:bd:6e:91:ed:35:95:58:b8:8a:00:9b:d9:13:ba:75:86:05:
0d:56:5a:4a:c2:d1:10:f5:41:5a:0c:2c:b1:89:cc:ee:46:83:
dc:93:62:0d:24:bd:8d:b5:4e:b4:0f:83:86:41:cc:2b:99:cf:
14:17:19:9a:6f:88:87:25:a8:d6:c4:52:aa:7e:24:97:3d:8f:
8b:9d:48:93:47:99:11:af:70:4b:5d:e1:a6:e1:7f:f9:d1:d2:
e2:43:84:26:e5:e9:1e:42:0c:1b:71:05:09:fb:0b:1d:a6:57:
63:da:18:32:84:b5:bc:a8:c9:c5:98:17:4a:07:be:72:30:71:
5c:63:e1:5a:ed:2a:71:0f:22:b0:cf:ff:93:59:b0:0c:82:38:
ff:5e:43:52:7f:b0:02:19:cc:58:6a:96:ff:96:d6:e6:11:62:
ea:a4:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client