Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: uFSL/0mRt0vu20pjsUbGHPpUufxe9HN0lYQAjDFlH1g=
Subject key identifier: 68:F9:6E:A6:77:8D:B4:D5:C5:B5:3B:E9:98:C3:DD:62:79:E5:50:44
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0198D5BC26EF3B0029B2491C24F54B3D4F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: h8UR1LtN2h9yEqnAU2SjPLWwpmxGyNCmwO9XaXUt/CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:26:ef:3b:00:29:b2:49:1c:24:f5:4b:3d:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=68f96ea6778db4d5c5b53be998c3dd6279e55044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:41:ca:78:90:c9:d2:81:20:6b:2a:6d:67:
1d:42:72:42:aa:50:79:81:2c:22:06:42:57:66:6c:
6b:60:8f:2f:4c:6d:1d:3b:ce:b9:65:e0:4c:ec:cc:
2c:24:af:f5:1d:3e:98:e2:21:23:fa:54:1f:2d:db:
da:eb:91:b0:f5:a0:d6:32:4c:51:23:2f:80:2e:4e:
9c:3a:12:85:5b:3b:2b:65:7a:a3:8c:3e:57:4a:40:
21:38:0f:7e:6d:7b:8b:40:95:c3:52:1c:03:4c:58:
76:a7:23:05:e1:a0:4d:76:89:49:f1:de:28:d5:3d:
78:30:b5:a2:54:e0:df:8c:fd:dc:78:2c:25:f0:81:
28:7b:09:03:e2:1c:44:de:96:f7:61:ba:6c:d5:3e:
10:9f:dc:c0:5f:e4:19:09:7c:3f:93:f3:9a:b7:00:
8a:2c:bf:27:38:d9:a8:fc:e2:4f:38:78:d5:53:47:
9b:f6:aa:01:c1:a9:27:1a:9e:1d:b3:40:bc:0d:4f:
a3:70:4e:d0:68:5e:f5:65:c8:fd:72:74:40:08:5c:
bd:05:69:b2:7e:12:c3:ee:22:ee:1a:7c:17:35:e1:
36:61:3a:8c:b3:03:d0:78:b8:c6:33:e7:82:27:af:
37:84:9a:e7:0f:85:47:ac:27:3f:bb:18:c6:17:31:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:6E:A6:77:8D:B4:D5:C5:B5:3B:E9:98:C3:DD:62:79:E5:50:44
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:ae:55:b0:df:2d:ce:bf:1e:b9:93:94:16:7d:e9:28:6a:
6e:33:b1:2c:24:33:c6:7b:ff:b7:e8:e7:90:43:12:cd:e6:5c:
57:94:8d:a3:4c:52:50:85:16:18:7b:46:4c:2a:11:d8:14:5b:
ed:a3:51:e9:78:41:a1:86:66:6d:b8:d9:ae:5f:1e:ad:3c:82:
58:95:51:6f:6a:ea:cf:7b:3f:67:6e:31:a8:45:05:96:d1:63:
34:e1:bd:48:13:6e:e4:e2:1a:62:42:47:e3:7a:3b:72:8c:d6:
b7:14:f6:e2:a8:e1:42:e9:9b:d0:a0:4c:28:06:3a:b8:2b:d6:
42:a8:c2:c4:ad:14:f3:59:8a:f7:06:3b:76:c5:c0:d2:cb:fe:
16:d2:0e:f7:e1:2d:3b:84:32:bf:12:aa:ca:16:0a:af:f2:92:
3d:3b:06:79:8b:d4:8d:fe:9a:5a:c3:8e:2a:15:c0:78:b7:8f:
1a:70:c9:27:85:e8:38:c9:38:2f:f9:3f:e5:85:15:34:ca:9b:
74:95:92:af:ca:7d:0c:49:bc:b1:12:6b:49:11:70:22:66:e5:
de:20:1a:33:a0:92:e4:3d:39:21:10:52:d0:86:d9:60:50:5f:
bf:fb:60:72:f9:12:db:3b:a7:f9:df:3c:62:3b:da:a8:ba:32:
c3:3c:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:55 2025 by rpki-client