Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: 6u1kf/2Yo+h0MmyI2HwsNgjTE1CqYegoQPu8mTFbdhE=
Subject key identifier: AD:82:4C:89:44:CB:07:40:51:D8:6B:A0:BC:CC:4C:49:BE:A5:68:BC
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 019A53E3FC3D6CDDAED06541922FBC972E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 4D
Signing time: Wed 05 Nov 2025 12:00:41 +0000
Manifest this update: Wed 05 Nov 2025 12:00:41 +0000
Manifest next update: Thu 06 Nov 2025 12:00:41 +0000
Files and hashes: 1: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (hash: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=)
2: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: etREHxrRgO5e5vb6Kv2pTRjaZxLpmnfhJcnhYldyKks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:fc:3d:6c:dd:ae:d0:65:41:92:2f:bc:97:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Nov 5 12:00:41 2025 GMT
Not After : Nov 6 12:00:41 2025 GMT
Subject: CN=ad824c8944cb074051d86ba0bccc4c49bea568bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:a7:f6:7a:c7:32:73:9b:9c:53:b3:d7:54:
e6:3e:77:ed:96:1d:d0:79:f0:53:dc:b4:af:34:98:
a5:76:09:36:d4:9c:05:dc:ff:b2:28:0a:4a:79:fe:
da:a4:6e:1a:08:6b:70:78:f4:0d:de:95:ce:ca:e7:
b1:ab:63:9f:9b:d1:fc:0b:fd:d8:b4:9f:96:1b:67:
8d:a2:c2:bf:7b:de:b6:1e:1c:cb:b9:d9:4a:a8:a2:
cc:32:13:2e:2d:bb:0f:a7:19:93:fd:fa:3e:16:35:
53:d2:cd:32:67:6e:42:48:73:a5:a6:6a:ea:25:16:
73:a8:82:38:71:32:50:5c:8f:61:04:57:18:2d:29:
8e:33:0a:8a:f2:d1:fc:4e:fd:34:c7:c6:db:c9:6c:
b2:7d:23:d0:df:10:40:f4:9f:0f:d1:e7:58:3c:43:
69:4a:0a:5e:50:66:63:b3:90:39:44:5d:05:74:6d:
fd:15:65:64:d3:76:1f:04:0a:1d:63:a9:d0:f4:73:
46:b0:07:54:5d:05:ed:5d:90:2c:86:82:20:f7:82:
62:1c:8d:c8:6c:c1:dd:d7:ee:68:8f:14:23:cf:bb:
e2:9f:98:6e:84:d5:38:7a:02:76:04:07:23:d4:96:
c7:d0:b5:ff:9b:16:c4:a6:2f:e6:f4:89:cc:7d:e0:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:4C:89:44:CB:07:40:51:D8:6B:A0:BC:CC:4C:49:BE:A5:68:BC
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:8c:83:6f:79:28:92:ba:aa:ea:2a:0d:5d:6c:c7:a1:2d:
bd:0d:b7:5b:dc:e0:ba:b7:05:b8:95:c4:8c:50:42:5c:8a:e2:
bf:79:80:d3:27:b9:f1:a1:e0:db:37:72:2f:33:e0:ee:54:74:
de:9c:93:04:71:40:65:55:40:5f:c5:e4:a7:6a:43:50:d3:14:
f2:4f:b2:80:05:6d:42:b0:75:f9:66:f2:44:eb:74:82:df:22:
cc:20:90:75:42:5b:58:4e:47:0b:b3:b9:b8:2a:96:45:2f:08:
37:a5:4a:e2:5c:64:02:80:29:5e:c2:8f:9a:8b:24:88:df:12:
08:9f:4b:dc:ac:a1:f5:ef:0b:e1:b7:e2:d4:82:17:bc:5b:99:
d4:4c:ac:6c:dd:1e:77:73:b7:f3:df:81:8c:63:2e:b5:43:da:
0f:55:ff:f8:ce:b2:37:da:9e:84:48:64:fe:c6:c0:27:3e:50:
7c:ab:4d:9f:79:f3:b5:fb:9d:27:bc:2a:ab:d4:9d:98:96:82:
bc:e8:50:2a:48:eb:57:4e:70:29:53:a3:04:75:32:4a:ee:61:
bd:50:22:49:9e:cd:32:d4:62:25:73:f9:92:57:ac:ac:c6:20:
33:ca:06:34:32:11:8d:9d:e8:0f:7f:ea:78:b5:16:71:00:3b:
b4:40:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:19:52 2025 by rpki-client