Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: Xb0N5ss79jp4Sr5swlJsHOIfcdNRJP4D/xvvvvtXbOs=
Subject key identifier: 79:2D:94:E7:E8:48:B5:58:3E:84:A3:16:C9:99:16:B9:0F:41:21:49
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0199FDD8D7E04412E02993BEC796DE11A46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 13FC
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: fZqSAeP/SXpoUHKKv0rMk29F2vMjf5iiUa13puIMt8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d7:e0:44:12:e0:29:93:be:c7:96:de:11:a4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=792d94e7e848b5583e84a316c99916b90f412149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:0b:7e:83:40:fe:96:40:21:e8:a3:3c:fe:
56:e5:c1:b8:f1:72:a3:3a:cf:12:81:3a:83:4f:0d:
bc:3d:08:1c:f5:68:76:a0:7c:93:77:6f:5a:9c:16:
88:38:78:6c:e7:c7:ec:d2:f1:67:e6:e3:ce:5a:33:
cd:17:06:f0:91:3a:cd:11:84:26:4f:3b:86:df:04:
8e:59:17:ea:da:b9:4e:6f:df:6e:ea:fe:bc:77:f6:
a3:2e:34:0c:6e:95:6c:79:85:6e:b4:5e:1a:9b:b7:
7e:34:34:0d:d2:82:d3:c7:46:50:05:4d:1c:a6:da:
3b:54:f4:dc:1b:fe:c0:5b:6d:fd:cd:93:a6:83:eb:
0f:e9:f6:fe:e2:92:9b:a6:58:8c:7b:3a:09:2a:c7:
a1:09:40:e2:dc:5a:c1:da:1e:9c:c8:18:b9:11:e0:
06:d0:c4:b2:f0:c6:a3:88:8b:b7:73:3d:45:b8:ab:
a2:d6:13:ec:06:f4:21:95:07:7b:b4:6f:a4:38:4f:
c0:0f:c9:37:a3:47:79:e4:d7:e2:e9:05:8c:97:7b:
14:8e:94:aa:bc:29:14:c9:c5:60:24:2c:80:39:9b:
cf:b8:91:c6:e6:44:4b:bb:72:90:64:44:a3:9b:11:
7b:68:87:9b:01:ff:69:1a:2b:8f:bd:fd:62:08:c8:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:94:E7:E8:48:B5:58:3E:84:A3:16:C9:99:16:B9:0F:41:21:49
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3a:8f:d8:a8:06:cd:ee:7b:9a:33:15:59:23:1e:49:55:44:
37:25:30:de:fa:19:64:18:3e:2c:9b:e6:bf:fa:a6:6c:2b:2e:
09:0c:a8:2a:26:66:ef:1a:58:b5:11:fe:2c:b6:9f:02:01:46:
98:d6:f3:db:0a:77:8f:8b:86:98:35:ce:85:84:54:aa:33:3d:
9e:76:79:1a:bb:42:06:6d:a3:00:cd:8d:dd:66:19:6f:93:8f:
69:6c:29:fa:fd:e8:6a:26:55:ed:a5:b2:32:12:7c:ff:59:39:
55:4b:e8:00:da:48:5a:c6:04:e6:43:27:76:0c:b5:f4:ff:2c:
63:fb:68:ba:93:50:54:61:40:7e:fc:e5:e1:e7:30:64:00:58:
8e:d3:43:7b:33:6c:1a:a3:ba:6b:57:44:c3:57:9b:0c:e0:71:
cf:44:c8:97:15:c3:95:0d:10:86:36:7c:3f:2f:24:8d:52:86:
7c:6c:e4:5e:49:f1:1b:de:13:8d:92:39:e7:08:a3:14:28:87:
92:39:62:71:52:75:9b:51:c0:ca:1d:ce:5f:d4:c6:30:98:0f:
f2:c1:b6:9c:62:e8:12:7d:17:12:9e:22:fc:62:ae:2b:14:bb:
2e:57:c0:f8:b8:65:fd:09:9d:2e:ab:24:36:ef:05:2f:8a:0f:
d9:9a:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:23 2025 by rpki-client