Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: KDtQu1YcGXw9gWHTS2IyR9VDLNLCtQP1bVcgC2qVJK8=
Subject key identifier: 0C:51:DC:3C:CA:01:C3:85:32:03:AB:B3:B0:09:66:94:23:7A:7E:82
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019A52D14ABDE588321E666019BD09B448E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0A2E
Signing time: Wed 05 Nov 2025 07:00:39 +0000
Manifest this update: Wed 05 Nov 2025 07:00:39 +0000
Manifest next update: Thu 06 Nov 2025 07:00:39 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: eVl97W1P0JeHXEj0x2esAhkrtJF9ZZPnodCq/834m8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4a:bd:e5:88:32:1e:66:60:19:bd:09:b4:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Nov 5 07:00:39 2025 GMT
Not After : Nov 6 07:00:39 2025 GMT
Subject: CN=0c51dc3cca01c3853203abb3b0096694237a7e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:58:2a:09:52:42:4b:32:e1:fc:b8:fc:32:
f5:ab:00:76:26:df:5c:21:53:56:4f:48:6a:49:f7:
13:60:38:db:df:fd:1e:97:9a:b6:c5:75:70:39:2e:
63:ce:3e:59:6c:ff:c9:d9:d2:05:25:5d:6f:af:d9:
aa:ad:0d:ea:33:2b:c4:1e:ff:2b:a4:71:2b:27:f1:
54:4e:1f:8f:b7:ca:e4:2c:c3:da:21:d1:95:2f:63:
aa:bf:bc:c8:5c:d3:6e:8b:95:7d:54:50:6a:18:06:
09:d0:e8:ed:98:61:bb:09:3f:43:32:27:e8:95:d3:
4a:d9:db:a8:c2:8f:0c:79:b2:77:1f:8f:c7:85:37:
8c:a7:02:0f:03:00:ac:db:cb:99:a0:70:78:4d:bf:
8d:20:f7:78:02:96:4e:99:ee:c4:9b:87:18:81:29:
50:ee:1b:76:5b:c1:da:06:3a:e9:4d:74:75:55:d3:
dd:e2:65:26:26:e9:a0:84:3c:a4:d0:ff:60:97:36:
3a:00:c9:9d:bd:d1:00:5c:c6:33:90:e1:8b:5e:54:
53:43:ba:78:ff:4d:32:4d:0d:d0:d0:58:62:fd:93:
78:66:a1:36:33:b6:bd:01:ea:4c:51:bc:b5:47:1d:
25:b7:42:5a:33:c0:98:7f:e3:99:a4:61:51:c1:19:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:DC:3C:CA:01:C3:85:32:03:AB:B3:B0:09:66:94:23:7A:7E:82
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:63:29:f9:f5:d6:39:bd:2e:e4:e9:ad:1e:89:78:aa:38:
43:d5:7b:ec:95:a8:7e:07:ba:7d:d6:7c:36:8e:53:73:3a:4d:
88:22:8c:46:ed:8d:64:5c:ce:f9:18:b2:35:02:7e:f3:a2:ac:
52:61:97:29:e8:17:c8:00:ae:9b:3a:e0:55:6c:bc:d2:55:60:
8b:66:1d:0d:5e:b0:47:2f:ec:19:65:70:07:54:76:20:00:fb:
1d:d7:d1:45:25:cf:53:5b:37:07:e5:e9:e8:98:84:93:52:98:
ce:5f:0f:d7:9e:c7:54:1e:0b:8f:5b:86:b8:b1:b1:d1:b2:56:
38:cb:72:d9:17:5c:09:c4:bf:59:70:5d:21:65:58:f7:73:71:
4c:26:83:34:90:02:4e:f6:72:24:e3:a7:32:fe:9a:63:b2:42:
0c:bd:d1:d5:76:ba:5d:c7:68:86:72:b7:f8:d6:be:50:c8:e7:
d4:a8:67:59:a9:64:02:a1:d0:a0:11:8f:32:28:8e:e5:92:80:
66:6c:46:76:4d:28:6e:ad:ed:6c:e0:27:65:a3:57:ee:ee:94:
01:69:f4:44:b9:e7:ed:a6:51:8f:cf:36:f0:52:bc:b2:f2:e1:
cb:96:04:cf:72:7d:34:fe:49:b7:cf:87:fa:f2:5a:22:03:24:
69:7a:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:46 2025 by rpki-client