Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: PQZLVJCheasb+rlaIJuKQmx3nrvyI/nk7BKR6OvwlsI=
Subject key identifier: C4:97:34:93:3F:85:03:E1:72:2A:8B:B5:F2:7E:F1:00:8F:1B:0E:6E
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0199FB463E9402FA382E0D39814CE611E22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 07:01:48 +0000
Manifest this update: Sun 19 Oct 2025 07:01:48 +0000
Manifest next update: Mon 20 Oct 2025 07:01:48 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: PoI0WF/IoPB6++Ttgu+sO01rPsd1r6fDrTlpLejevcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:3e:94:02:fa:38:2e:0d:39:81:4c:e6:11:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Oct 19 07:01:48 2025 GMT
Not After : Oct 20 07:01:48 2025 GMT
Subject: CN=c49734933f8503e1722a8bb5f27ef1008f1b0e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:df:a8:fd:e1:16:d1:eb:05:6d:bb:8d:34:
a1:1b:8d:70:5a:7b:c4:90:04:fd:8f:7c:52:69:ec:
9d:ae:b3:a7:40:21:9a:73:70:6a:c9:19:07:96:3a:
f4:ef:44:1d:17:ed:b9:c9:c7:0c:08:1b:9a:aa:5a:
14:d3:41:19:08:4a:cc:84:50:dc:06:8e:01:13:01:
cb:56:43:8e:f6:53:0c:ef:a5:0f:f2:ae:ef:00:9b:
f6:86:f0:12:6f:65:2e:d8:da:ba:2d:3a:3c:f8:ed:
69:14:a1:c6:95:ec:ef:19:0c:1f:f2:6b:05:08:ff:
e1:f1:4a:9a:7f:64:2f:72:50:5e:e4:c1:bc:39:87:
2a:48:36:7d:f0:11:79:ea:2f:aa:f2:c6:06:0b:92:
fd:d9:c1:23:90:6b:b0:17:4c:95:1a:b7:ac:44:9a:
de:de:ee:a9:67:be:8b:55:77:1c:e6:5d:c1:27:65:
7a:0d:cf:c3:77:91:3d:62:1d:72:0f:e1:8c:f8:d5:
76:89:34:13:d3:59:22:de:b4:67:f9:67:e8:58:3e:
59:2f:94:e5:c2:c1:ee:7d:30:ab:69:96:b1:f9:28:
d6:08:af:0c:36:b8:80:2f:49:47:59:b2:ab:ea:3a:
5d:5d:80:25:62:2a:93:cd:70:fa:23:3e:17:13:1b:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:34:93:3F:85:03:E1:72:2A:8B:B5:F2:7E:F1:00:8F:1B:0E:6E
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:95:d5:dc:bb:27:34:3b:b0:32:36:96:89:d0:df:ed:e3:
f4:3f:36:13:2e:64:a2:e6:6b:49:fa:c1:b5:9c:31:92:6f:11:
e7:9c:fc:7a:13:b2:28:58:2e:6e:89:d6:74:00:d2:19:da:cb:
0b:f6:9c:9b:c4:6e:96:fa:df:db:69:9a:cf:c8:47:31:88:4f:
c3:18:5d:4a:bd:35:ba:82:90:e3:32:7f:d1:d0:34:77:27:01:
b8:50:de:88:87:52:ae:cb:c3:eb:ec:8c:dd:a9:85:35:11:eb:
35:23:9b:80:d5:85:03:7f:53:e9:15:97:cc:c3:86:0e:7e:89:
27:5f:5a:50:af:71:cd:81:f6:bd:9b:08:40:75:d6:d0:1f:dc:
79:a9:07:a5:4c:bd:3d:c9:41:a8:66:6a:ed:60:eb:00:be:24:
c5:86:2d:bc:d2:27:7b:c6:27:8f:fe:10:4c:7d:29:a9:22:ec:
d0:d4:d7:e9:e2:64:3f:50:59:e6:26:fc:02:aa:97:90:58:6d:
9d:de:4f:32:ff:ab:ec:ac:9e:46:0e:df:ae:58:89:6b:1f:be:
33:64:dd:03:b7:6c:6b:2a:f8:8d:61:9e:f8:63:88:cb:d2:06:
d4:c1:5c:3b:0d:2b:87:0f:ae:55:42:00:f6:b5:50:6a:8c:fb:
e2:03:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:49 2025 by rpki-client