Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: kpqeyiqh4MPVoCkssjmikfo95xbb7Q1R2zG0l+2ONsY=
Subject key identifier: 27:2F:B3:2F:A9:0F:9B:8A:F2:A4:8A:A1:00:04:8D:AD:DF:B7:02:A8
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 01987C773D7B1A9001F2AADC16F19DE87840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 115B
Signing time: Tue 05 Aug 2025 23:00:45 +0000
Manifest this update: Tue 05 Aug 2025 23:00:45 +0000
Manifest next update: Wed 06 Aug 2025 23:00:45 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: ESEzyyr1m16+BCdmcNkjZd/errEG8EDNOmWBWmtnzI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:3d:7b:1a:90:01:f2:aa:dc:16:f1:9d:e8:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Aug 5 23:00:45 2025 GMT
Not After : Aug 6 23:00:45 2025 GMT
Subject: CN=272fb32fa90f9b8af2a48aa100048daddfb702a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:05:be:d6:a1:1e:5b:71:68:f9:e9:4f:b3:
6a:ca:7f:8a:93:c2:d5:a0:49:c0:27:4f:d6:36:da:
77:d3:4e:40:c6:58:8d:f3:83:1a:5a:a2:1f:81:2b:
29:35:8d:35:28:55:1d:7a:94:ae:3f:b1:8f:05:42:
c6:34:f1:44:87:2f:9b:24:70:4d:90:ff:53:11:d6:
b3:95:ed:59:da:f6:32:08:05:db:5d:cb:a2:6f:78:
6e:f2:7a:0e:3c:dd:99:63:0b:a7:82:0e:35:5d:e2:
00:64:28:87:2d:c1:3c:f7:65:6a:93:98:65:40:f4:
e8:5c:96:a6:2c:80:8a:6a:73:ca:ab:53:0c:53:ea:
ea:85:18:5a:00:2f:09:4e:33:ca:89:fc:69:9c:1e:
f1:62:29:9b:25:08:16:7f:d1:d7:db:58:0b:1d:f7:
6f:f2:99:a9:dd:1e:19:a1:2a:60:2e:17:3b:a1:d0:
47:ce:0f:c5:bb:ba:2c:c0:cb:00:5c:2c:76:3a:5f:
75:c9:b2:87:ba:24:b9:13:9d:be:5b:f4:a8:91:ae:
4f:ee:08:94:c0:2b:d1:0b:91:28:d5:7a:9f:13:34:
3d:63:78:b5:00:8b:44:0d:21:5b:c0:ac:75:21:67:
34:f8:63:d4:4e:1c:1e:b2:76:48:35:4e:7a:e6:3e:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:B3:2F:A9:0F:9B:8A:F2:A4:8A:A1:00:04:8D:AD:DF:B7:02:A8
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:3c:ca:db:fb:ee:1a:6e:d5:c8:cd:bf:dd:d0:7c:8f:ba:
44:6c:b1:33:6a:6b:e8:e2:71:8d:42:f1:33:92:4e:b5:26:77:
82:70:b8:8c:6e:45:13:d7:b2:26:57:9c:2c:4b:f3:c3:6e:8c:
ef:9b:93:58:87:96:7a:8e:58:53:2f:4b:a4:38:9b:e3:4a:f9:
18:e4:64:ba:8b:35:61:31:b6:79:23:cd:58:ef:5e:db:67:77:
20:03:35:20:46:4b:2d:44:e0:53:a5:a0:c7:f2:13:4a:19:8e:
a1:f8:53:7d:24:94:55:12:da:e6:c4:68:ad:3c:ea:5e:31:58:
81:f8:66:43:8d:ab:80:9b:d3:04:6c:b9:01:23:89:7e:a4:6c:
92:c0:90:6e:4a:02:dc:6c:0d:34:7e:67:2b:37:68:17:7f:cc:
f4:29:18:4b:53:3a:b3:11:ac:88:2a:7f:4f:1f:fa:4e:50:19:
a7:82:aa:5f:ec:27:2b:8a:6a:2a:5f:79:75:99:5e:52:14:b8:
44:f1:36:4f:01:e9:6d:7f:d2:c5:47:0f:ab:9c:2a:72:44:e1:
39:69:91:a2:48:6f:4a:0f:3d:c2:ec:ed:f8:71:6a:6c:b7:5f:
91:a6:21:3e:25:3b:6c:b7:fa:8d:92:ce:34:72:21:eb:a8:cb:
0f:af:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:22 2025 by rpki-client