Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: Z04PiT44FrR9bM208OUcFJRjj76G5MTEYavrvHca+4g=
Subject key identifier: 27:E5:48:42:85:6C:7D:83:5F:74:D2:ED:F1:94:B1:14:41:C3:4A:70
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019A51BE308529505FBCF405212610248DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 0131
Signing time: Wed 05 Nov 2025 02:00:09 +0000
Manifest this update: Wed 05 Nov 2025 02:00:09 +0000
Manifest next update: Thu 06 Nov 2025 02:00:09 +0000
Files and hashes: 1: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (hash: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: 8pdc/Ix1Ku0H2vBdq0GEcw7ijCj0A8ef8bB5FAklgRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:30:85:29:50:5f:bc:f4:05:21:26:10:24:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Nov 5 02:00:09 2025 GMT
Not After : Nov 6 02:00:09 2025 GMT
Subject: CN=27e54842856c7d835f74d2edf194b11441c34a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:33:30:7a:3b:29:34:a8:17:b7:1e:70:f1:
a2:a8:7d:6a:5a:28:12:5f:22:b4:81:54:f3:16:8b:
08:f3:a3:be:a7:29:bb:1a:a4:14:fa:bb:ad:4b:90:
fd:61:40:da:d5:af:67:8a:1c:a9:0d:da:f5:00:2d:
a0:77:43:04:0c:04:f6:ed:e3:aa:25:eb:d7:2d:34:
a1:cc:91:88:d4:c9:da:27:73:c6:67:26:2f:6c:44:
6a:5f:c4:54:0f:d9:39:bf:33:b2:3a:b9:c7:04:6e:
6a:6d:0e:b7:8c:27:32:bc:8f:94:88:2c:67:5d:ff:
71:ed:2d:5f:5c:5a:d7:9d:20:76:8a:c8:ca:80:c8:
b4:64:d6:02:4f:24:85:a5:0a:a3:f0:9a:68:7c:05:
43:21:1e:2f:e4:18:2a:0d:46:32:46:f4:ba:2b:ad:
35:4e:53:89:d6:e7:c2:69:4e:a4:b0:ea:21:13:18:
ba:85:f1:8c:75:63:a2:9b:2e:af:2c:41:58:7e:89:
12:d4:d0:5f:3d:9c:b8:a8:36:ae:79:90:d7:6b:c4:
c5:f9:97:ab:4b:33:6f:1c:48:e7:4a:e5:29:fd:2d:
5b:a5:40:87:be:41:fb:ab:5e:a3:21:86:45:17:96:
51:58:c5:c9:4b:32:8a:19:00:8f:79:ca:a5:08:aa:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:48:42:85:6C:7D:83:5F:74:D2:ED:F1:94:B1:14:41:C3:4A:70
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:14:5a:55:18:9c:71:c9:85:95:42:1c:a4:44:11:08:a1:
a9:28:6b:3f:db:01:8a:06:d2:e7:92:df:6c:31:8f:bf:79:11:
e3:72:d4:ac:dc:8c:11:57:b1:c4:12:e4:c3:47:1c:c7:c8:50:
b5:a9:4d:73:c3:c6:86:47:cc:01:c3:50:a0:68:ba:fd:d4:3f:
fd:c0:33:d2:02:77:09:6f:0c:62:5f:9e:44:f8:78:21:85:9a:
86:9d:ed:26:c3:8c:c4:4f:a3:2d:1f:7a:f1:6b:88:7a:50:a9:
3c:c2:f9:f9:2a:48:5d:7f:fd:14:35:d8:ac:d0:6e:1a:a0:3e:
56:7b:f3:c0:78:05:0d:f9:0a:0e:f2:47:44:c9:23:ed:b1:a8:
dc:38:fa:e3:de:36:e8:e8:51:f5:02:2c:3c:b5:50:5d:b2:c6:
71:64:41:ce:71:73:de:cb:79:fc:2b:a9:16:7f:7e:c6:e4:2e:
d7:18:49:07:99:bc:2d:9b:d0:74:a5:d6:cb:57:5b:c8:e6:a0:
58:96:b9:c8:5d:ac:c2:ea:5e:1b:d0:2f:aa:1c:bf:33:07:88:
e9:29:f3:5a:5b:15:49:e7:28:73:e4:c4:12:b9:55:5e:65:76:
b9:a9:b3:da:21:3b:98:d4:2e:5c:71:cd:87:7d:a0:22:83:d3:
9a:ea:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:47:06 2025 by rpki-client