Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: qyRnbS4Hiw5kQsVPl7/637XAtSyxJb31whq52IveW3c=
Subject key identifier: D1:F1:4D:4D:05:9F:09:E5:52:DF:7C:C9:58:1E:B2:81:29:EE:F4:AA
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019873E1DAF16FC7D1A62CFE0DEE24DD59C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 125F
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: 8eI3HKm9vjKVR3OWfMg0n8UV5rhDKlgbd/LA1UwmQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:da:f1:6f:c7:d1:a6:2c:fe:0d:ee:24:dd:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=d1f14d4d059f09e552df7cc9581eb28129eef4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:45:15:c9:de:d5:32:d7:e9:0f:67:52:d2:
be:06:62:5f:9f:02:ec:9d:d2:cb:de:1d:6d:20:ea:
c1:85:4d:00:74:06:10:94:a5:8f:ab:7e:b5:63:48:
95:60:86:a9:d7:71:14:ef:12:ce:cb:87:d5:6b:64:
4e:5a:fd:a5:9f:35:49:5c:00:70:3e:11:f3:8f:72:
e1:21:37:f3:76:08:22:fa:a2:3d:e9:df:55:e9:08:
81:f7:7e:82:da:86:b4:8f:f5:3e:71:b4:6f:3d:3d:
4b:f7:2c:6d:75:d6:44:a3:e8:19:64:4f:32:d8:2b:
9c:39:08:05:c7:e8:cb:83:4c:9e:19:41:40:32:c6:
ef:ef:8e:c3:7f:ea:bd:a6:a5:06:3c:b3:10:b9:5c:
d4:84:b2:e4:e0:1a:6f:04:2e:40:6e:90:30:11:c5:
1a:ac:26:c9:b9:37:21:c1:2b:40:79:ae:2b:99:e1:
7c:0f:e1:56:3d:1e:8a:a1:90:01:b0:fa:17:c2:c8:
21:1d:9a:2e:59:2f:be:37:44:09:f4:d6:16:4b:db:
9a:a9:17:01:6e:d2:fd:d9:e7:d2:45:32:59:8e:10:
b4:3b:53:88:0e:ea:16:6d:24:b7:4a:b2:d8:db:bc:
2a:15:e8:22:5d:88:8c:17:57:0a:9e:bf:ae:e6:00:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:4D:4D:05:9F:09:E5:52:DF:7C:C9:58:1E:B2:81:29:EE:F4:AA
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:04:b3:fd:5d:89:65:f8:dc:19:3b:b0:ff:4c:14:f4:af:
e2:b7:c0:e0:83:93:9e:cf:66:f7:46:69:05:f2:8d:ea:fe:27:
c3:82:4a:8b:d1:03:30:6a:9d:37:09:ab:d7:b9:f2:4e:ab:f7:
7c:76:7f:5c:c8:41:20:eb:2a:0d:8e:4d:f6:9d:66:a6:52:81:
6a:b6:43:a7:74:ef:46:f6:4e:81:7f:09:8b:c2:1b:86:ea:df:
87:36:cf:75:b2:4e:e7:22:c6:10:e3:29:ed:43:04:d0:56:d2:
b8:fb:2f:09:2c:b7:6f:24:78:db:43:42:c3:95:4e:88:d2:ce:
f1:06:c8:63:21:c8:b1:eb:d1:80:27:78:ee:a1:db:ac:b9:f5:
9d:75:0e:d0:40:1a:75:f3:46:74:c4:6c:f0:ee:ac:a9:b1:5f:
f4:6b:3f:8a:22:2d:cf:09:c0:0c:d0:d4:40:f7:f8:1d:84:08:
24:a0:cb:c0:05:6a:70:a4:9e:fe:b6:dc:02:65:9b:fe:e0:2c:
1d:cc:60:51:80:2c:8f:79:69:a0:a0:08:e8:0a:e7:cf:9b:da:
a2:17:c9:fa:83:7c:aa:41:db:07:76:61:e3:19:0a:ab:20:3d:
49:67:33:6c:3f:d1:fe:3c:9c:69:a0:7a:ec:8f:a7:ed:db:e5:
d1:4c:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:28 2025 by rpki-client