Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: oheClndU1W/6HPF7QibtB9Ee8UAo5BoomhHZzde2E7U=
Subject key identifier: 94:AE:2D:4C:46:7B:79:84:80:9E:2E:DA:5A:75:86:4D:2E:20:7E:A0
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019A0223871D7005358FA15B02A2C7B48A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 153A
Signing time: Mon 20 Oct 2025 15:01:13 +0000
Manifest this update: Mon 20 Oct 2025 15:01:13 +0000
Manifest next update: Tue 21 Oct 2025 15:01:13 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: 5plPTh7OiSKR5zU1o90IOxscEXfN1cEFJIg/65nv3OY=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:87:1d:70:05:35:8f:a1:5b:02:a2:c7:b4:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Oct 20 15:01:13 2025 GMT
Not After : Oct 21 15:01:13 2025 GMT
Subject: CN=94ae2d4c467b7984809e2eda5a75864d2e207ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:43:ae:48:46:5e:79:f1:a4:57:0b:09:31:
70:70:5c:b9:9a:f1:5d:a0:0f:b3:bf:6b:a9:ff:58:
96:d9:5e:c1:f8:7d:ab:f8:96:48:97:92:09:03:98:
43:57:df:e3:bc:20:25:bb:2c:d6:25:f0:f9:fa:6c:
5a:07:73:88:b0:43:fa:e2:f5:84:b6:7c:58:48:ed:
c6:3b:28:b9:cb:88:5c:91:4f:28:9b:6c:f7:2d:78:
4f:09:17:e6:80:3a:5b:56:72:df:89:0c:38:6e:a9:
90:9d:18:24:46:3a:a2:45:2c:cd:4f:40:45:a7:d9:
ca:c2:ee:65:13:51:76:ba:cc:b3:af:a2:03:9e:66:
f8:ca:f8:0e:58:1f:54:ed:23:fa:ef:78:9f:f3:f1:
97:f5:15:71:63:ce:e5:fb:38:92:c2:60:4a:f0:a5:
b2:7f:88:58:a5:3a:af:33:5f:a1:a7:1c:fc:80:ff:
cd:42:fe:e4:ba:f6:1f:8a:0f:07:7e:9a:06:c0:39:
dd:e7:66:9c:34:06:57:96:0a:a6:cb:7c:16:fa:26:
ac:5b:8f:cf:f3:2f:f9:68:27:a6:cf:52:76:48:cc:
b0:81:f3:b6:a9:1d:81:5a:e0:4b:8a:68:6b:aa:95:
c8:32:09:2f:28:a4:e3:25:d5:24:c7:9f:36:ec:ea:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:2D:4C:46:7B:79:84:80:9E:2E:DA:5A:75:86:4D:2E:20:7E:A0
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:19:ee:31:1c:4d:2a:d7:4b:87:b7:c2:46:12:96:0c:e5:12:
05:09:95:ed:c1:7b:07:cb:1e:a7:e3:2b:c5:61:08:43:f8:66:
e3:76:d4:4d:d6:a4:c6:3a:a2:46:a4:9b:e1:d5:e5:03:d5:bd:
f2:41:f4:6c:48:60:28:7c:78:27:88:8b:7b:e3:39:82:51:bf:
24:c3:f8:cf:8d:a3:7f:cc:26:8f:78:85:18:1f:47:9b:7b:1f:
5c:e5:df:16:3e:53:20:8b:24:8f:94:e5:a4:71:2d:32:2d:51:
6a:ee:1f:c1:6a:8f:3d:cb:aa:5e:20:84:b1:b4:ee:3e:e9:e8:
82:95:f7:cc:6b:dc:48:e9:0e:ec:41:f2:fd:06:af:dd:59:dd:
91:82:e5:59:a8:d0:0b:a7:94:28:fe:58:9c:e5:97:ae:0d:5e:
0a:0f:b2:a5:3a:bf:38:4a:33:10:ca:e6:d6:f4:a3:59:d4:61:
41:b1:8e:4e:e5:90:78:b8:57:48:66:42:ae:16:70:cf:88:a9:
e2:fb:ff:38:78:a8:28:2f:67:bb:23:e9:58:3b:88:79:d6:aa:
47:63:a3:06:54:20:98:da:51:26:fe:81:c4:b0:a5:c3:d9:12:
5d:f0:9c:a4:b5:b1:92:06:c4:99:ab:49:5e:86:7d:93:0b:2b:
53:3f:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:48 2025 by rpki-client