Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: wU7hyI64RLTwvEBgYuoXaKdNNU9rK0b8lSoR1QLK9NM=
Subject key identifier: A3:8F:9F:8E:94:D6:B2:5A:36:01:29:6E:FF:C2:6C:BC:FD:89:3E:00
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019A71133433DD5F16DA039234655E490DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0D1E
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: hVep6LZasWbmWE773Mt6gDzNdHIYu1cY93mpQ56wJRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:34:33:dd:5f:16:da:03:92:34:65:5e:49:0d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=a38f9f8e94d6b25a3601296effc26cbcfd893e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:bf:70:df:d5:02:73:d4:f0:8a:13:29:bd:
65:ca:bf:94:5c:1c:39:a6:c7:ab:d6:b0:d8:67:06:
17:88:f1:ee:bf:7e:ea:5d:35:8a:c7:f2:ca:f6:a8:
34:89:9a:7d:d1:d3:91:ce:b7:22:4c:a3:47:79:7d:
1f:a6:0b:ec:f8:92:db:e8:6a:ad:cb:b2:7c:9a:0a:
3f:0a:d9:e7:51:ed:0f:be:ee:4a:6b:68:ce:fe:cc:
39:bc:93:8e:d1:ae:9a:19:e1:3f:8f:2a:4d:6c:96:
1a:fd:58:ac:64:6b:aa:93:7d:72:3a:53:17:9c:fc:
a5:7a:f6:f7:df:66:8c:bb:6a:ae:a3:d6:12:7a:98:
a2:02:41:4b:1f:82:b2:ec:4e:97:ea:9a:37:1d:22:
50:ce:cb:49:d9:38:04:92:64:04:bd:ea:20:cc:56:
f1:e5:29:ff:13:18:62:53:45:12:74:cb:9b:35:77:
c1:3e:1b:ce:d7:a6:af:ce:36:e2:8e:d9:42:4a:ba:
8f:5f:58:a1:79:85:3e:3f:aa:3f:76:c3:5f:14:24:
3a:be:d2:24:ac:12:7f:93:16:2c:5c:c2:d7:86:83:
e8:90:12:a8:8b:8e:ce:5c:f1:15:58:41:04:04:4b:
b7:27:e3:6f:5d:08:b3:5f:27:ee:d3:6b:a3:74:93:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:9F:8E:94:D6:B2:5A:36:01:29:6E:FF:C2:6C:BC:FD:89:3E:00
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:98:fa:44:70:14:a8:65:00:42:75:4d:ad:02:ff:8e:06:
5a:58:47:9e:a1:c0:7f:eb:7a:41:b8:5a:e8:4f:3c:e8:29:08:
ad:97:f3:aa:01:7d:00:7c:b4:14:c2:68:df:d1:b1:ad:1e:30:
81:a0:34:1d:9b:b7:1b:d2:fc:6b:c0:1a:dd:3a:8f:d3:14:16:
16:40:1b:08:1d:fe:dc:c8:8c:5a:4b:ba:bf:4a:a1:69:8b:86:
b6:f2:72:35:be:0b:05:21:c5:98:b2:78:ba:a9:8a:f8:11:b8:
ee:a8:aa:e9:9c:35:52:80:54:a8:52:e8:52:c6:1c:c7:88:f5:
42:97:1c:d9:de:0d:27:05:5e:2a:7c:64:cc:e4:de:da:8a:44:
23:3d:7e:7e:e5:89:d6:5e:8d:4b:a3:fe:13:cb:69:04:05:6a:
f7:53:3a:11:b5:5b:90:b2:d6:d8:08:2c:19:a2:c0:b7:f6:97:
3e:17:38:9f:08:5b:05:d8:ee:10:9e:4c:03:66:00:9d:85:d5:
1c:14:d9:f3:bb:04:1b:3b:23:64:e1:75:d7:33:b9:be:44:be:
d3:ae:38:9f:85:76:d9:5b:a0:f4:f9:7a:a8:db:49:ad:df:20:
88:49:ce:4e:0f:d6:16:4c:85:93:66:0c:72:d8:a1:1b:4b:bb:
db:2f:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:01 2025 by rpki-client