Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: icTyJmdWtP5CtB3cNADZescgAL+I1e8jDVfnZQ9Wk54=
Subject key identifier: 89:98:F8:7F:8E:3D:8E:6B:E3:BA:65:AA:4D:56:A8:37:02:D6:F1:D5
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 0199FC58C19DE4B0624C9E753830EB9D07E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0C23
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: 9MpbbVD51maMgWsFPhu0jK394LlIXuZxNKLrzi4vS/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c1:9d:e4:b0:62:4c:9e:75:38:30:eb:9d:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=8998f87f8e3d8e6be3ba65aa4d56a83702d6f1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:ad:86:66:a9:b9:22:b2:43:3b:65:67:97:
28:db:7f:6a:04:09:ac:ae:10:0b:e2:ac:95:17:fd:
3b:70:99:34:46:46:22:fc:e8:88:03:20:25:8e:8b:
0c:c6:7b:49:96:96:0b:17:69:cf:44:6b:6d:a3:bc:
72:a3:69:b2:33:52:08:ab:77:65:64:57:27:17:ec:
e7:47:76:a3:be:3c:b6:d8:29:85:f4:b0:eb:44:cf:
19:2b:16:5c:b2:2a:97:94:b5:d6:70:bc:b3:ec:c8:
a9:75:6d:7b:0c:bd:de:67:04:91:ef:ce:f7:ce:ee:
61:71:9c:fa:03:e0:b2:b2:fc:98:de:74:bd:09:c1:
e9:ea:06:a3:8f:09:6a:4b:e1:6a:30:9c:79:a0:47:
07:d6:e7:fa:28:53:42:89:69:44:a9:b5:5e:be:d7:
b7:fc:98:81:83:12:e8:16:f6:7f:bd:79:86:db:33:
4d:d8:5a:20:89:72:20:4c:5f:65:bc:c6:ec:73:9b:
d2:64:db:13:1a:2e:ec:28:f6:13:e0:d0:76:81:a9:
71:91:be:87:45:c5:8f:4f:8a:61:9a:e6:46:69:e5:
d0:69:53:7d:e0:ff:b1:8a:71:a0:93:20:d2:fd:47:
71:7c:f6:6b:e6:30:a8:21:16:28:8c:d3:cc:d4:66:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:F8:7F:8E:3D:8E:6B:E3:BA:65:AA:4D:56:A8:37:02:D6:F1:D5
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:f9:11:47:24:a3:e8:77:4a:e9:c9:aa:1e:63:8f:4e:44:
7b:ba:74:a2:46:a3:b9:00:e6:f8:f1:bd:fa:ad:97:fe:58:1b:
d5:47:60:6e:80:ed:91:80:f9:e5:50:66:92:90:71:56:f1:22:
2c:79:73:f6:d9:c7:d1:47:78:3a:14:f3:69:1f:1f:c5:c8:32:
73:c2:47:c4:7f:f5:44:f9:fe:a4:36:55:e2:00:2f:7e:05:3a:
0f:f0:11:62:db:dc:45:07:c6:3e:1f:a0:4d:7a:c5:71:45:b6:
23:8b:bf:f5:67:31:3c:da:89:4b:18:71:99:8e:8c:6a:09:bc:
ca:93:86:83:70:d0:ba:45:c1:b9:a9:cc:7a:99:36:ed:b5:4d:
56:8d:d9:90:68:8a:ca:48:66:4e:e3:e2:e0:3f:0b:12:87:75:
aa:69:f0:b7:7f:9b:b9:88:9f:50:fc:7b:34:58:00:06:b6:92:
f8:4a:1a:d0:f7:1a:bf:40:65:5a:8e:e6:27:20:f6:98:91:e0:
f2:76:d7:43:41:dc:f1:8b:9a:ad:18:7f:88:0e:a4:4d:53:cc:
cc:c5:ae:f3:a6:f4:c5:1f:5e:71:e0:65:ce:67:b6:e7:5d:09:
d2:8e:4c:b5:e4:b4:5b:30:91:ec:67:83:e0:aa:4b:09:71:ec:
2e:72:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:39 2025 by rpki-client