Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: H4h1AOhvb7ZRVYMEqG3Pa1xpCKzW0r+GKF+e/rFtqcc=
Subject key identifier: 90:67:3F:71:5D:AE:3A:C6:DC:6B:63:DB:F0:97:86:3A:DA:40:3F:F2
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 019873745693A8B50792959A745135A67349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0D0C
Signing time: Mon 04 Aug 2025 05:01:00 +0000
Manifest this update: Mon 04 Aug 2025 05:01:00 +0000
Manifest next update: Tue 05 Aug 2025 05:01:00 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: ChCzzWUxgUjLOkC37WlTzIU6owWI5ONlXiYAXh7byX8=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:56:93:a8:b5:07:92:95:9a:74:51:35:a6:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Aug 4 05:01:00 2025 GMT
Not After : Aug 5 05:01:00 2025 GMT
Subject: CN=90673f715dae3ac6dc6b63dbf097863ada403ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:6b:7b:12:42:1c:32:57:43:21:15:fe:5b:
9a:c7:5e:bd:23:ad:6d:e0:7a:67:a5:99:7e:91:46:
1f:7a:f4:9d:57:df:5b:94:b8:1a:55:41:0c:70:ca:
98:55:fd:6a:2a:f2:10:e1:73:b1:57:37:e4:d5:8d:
1e:58:d9:c7:88:a1:d3:fc:d2:79:3e:64:aa:4f:49:
a9:eb:2a:e4:d7:1c:d0:84:84:1f:9e:9d:39:90:c1:
e5:d2:50:39:92:c5:f6:2e:1e:48:34:da:c6:54:8f:
7a:62:c8:e9:89:9a:bb:f9:87:bc:57:a9:27:cd:cd:
28:64:b4:fa:0e:68:72:ff:35:86:59:e2:d0:46:33:
5b:0b:14:d2:dd:d4:5c:9f:6f:58:c7:c1:a3:37:d7:
6f:bd:1d:28:a4:41:4b:09:6e:5f:81:c6:6e:fb:c7:
04:41:64:c4:53:41:94:9d:f6:4a:88:b9:6e:fd:24:
0f:a7:08:d4:de:1c:45:d4:ea:b7:29:d0:45:e0:d5:
2f:07:f4:8c:8c:84:6c:29:c3:5e:82:a7:17:85:c3:
fe:a0:c3:3a:41:9f:5b:83:8a:16:41:94:48:ba:68:
dd:24:1a:90:f7:5e:0e:a8:8a:a4:6c:56:5c:19:c4:
1c:94:15:f8:1c:9b:29:c1:c1:86:91:0c:2f:2b:da:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:3F:71:5D:AE:3A:C6:DC:6B:63:DB:F0:97:86:3A:DA:40:3F:F2
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6a:f6:63:78:e2:e4:d0:e7:a0:43:77:3e:2c:31:1b:ff:e3:
0b:e3:4f:a0:4d:af:69:a4:39:7a:d3:c5:0c:02:48:bd:44:14:
19:12:7d:92:95:65:43:18:c8:30:c3:cb:58:70:37:a5:de:d9:
ac:1e:85:8a:dc:6a:f6:d6:ee:61:c3:9a:5e:78:1c:32:bf:27:
11:92:e6:31:e8:71:40:99:57:32:64:64:60:a7:6f:a6:3f:3e:
2f:3f:f3:24:5b:de:b0:77:f3:64:d4:ac:b1:ec:ea:6f:08:92:
50:d2:cf:2b:a9:0d:85:3d:59:96:60:4a:bb:40:e1:6a:1f:fa:
15:30:d3:12:df:56:1b:d6:e4:40:01:ff:d8:e9:61:c3:b0:b0:
66:fe:0f:9f:f6:93:61:97:7d:3e:e0:d7:34:67:de:55:1f:cf:
c9:14:d2:e7:dc:69:b2:76:29:a2:a8:a1:bf:28:5c:a7:4f:e3:
11:bc:86:97:8b:4a:7c:66:71:3b:b1:b5:ed:e1:38:e0:a5:d3:
66:eb:ef:cc:bb:69:71:fa:69:e9:1e:42:09:30:65:1f:ac:f7:
9a:52:80:81:19:fc:af:20:65:ef:38:f1:86:81:35:01:c9:3b:
fd:c4:e3:67:45:27:c3:60:fe:da:64:aa:94:1c:e3:1e:bc:76:
13:ad:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:28 2025 by rpki-client