Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: bz5Rz/+UJn9GQHEgNXNh8uC8bswbQ/Ar4misXlebytY=
Subject key identifier: 4D:EC:80:85:E4:4C:FB:AB:B8:4A:17:2F:68:C5:1B:87:37:CB:E9:18
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019896DC0428F6845B17F0CC6D3E1D4A8EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 4A
Signing time: Mon 11 Aug 2025 02:00:57 +0000
Manifest this update: Mon 11 Aug 2025 02:00:57 +0000
Manifest next update: Tue 12 Aug 2025 02:00:57 +0000
Files and hashes: 1: 5IPzjXtbudzhqWSCz_2qKpvgqfM.roa (hash: 3/k5aiqNpyNZ/fHElOfLbVv7ZKiwKvI6JAy6AM1SccM=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: FhW/REzYr7CVlvEErjo0PLQVV5QauGQmaRZZDn0m87g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:04:28:f6:84:5b:17:f0:cc:6d:3e:1d:4a:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Aug 11 02:00:57 2025 GMT
Not After : Aug 12 02:00:57 2025 GMT
Subject: CN=4dec8085e44cfbabb84a172f68c51b8737cbe918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:03:2d:64:15:9e:57:66:b2:8f:56:fe:68:
16:39:1e:fe:c2:c9:6a:e5:14:30:92:ad:6a:a5:8b:
fc:1e:63:1d:c8:09:6a:58:7f:b1:53:66:08:00:1a:
36:d1:2c:e3:90:fd:82:d5:19:3e:9d:da:f9:c5:19:
06:e1:b1:a0:e9:d8:0e:ab:3b:bf:24:4e:bb:fb:52:
4d:33:37:45:10:28:5c:c4:e1:c9:c3:cb:b7:61:7c:
25:b9:29:c8:11:88:1c:c3:a9:cf:f8:b5:40:07:ce:
50:26:db:25:a8:5f:ad:7a:d9:ae:45:a8:4f:7d:27:
41:c8:de:fd:d8:8f:d9:6d:e3:c4:92:b7:bf:81:db:
48:ac:32:a7:c9:cb:a8:31:fa:c2:85:7b:5b:9a:50:
e8:ea:ea:0d:c0:02:a4:00:ca:0c:df:d4:90:56:3e:
31:8a:bb:71:ae:4c:7e:51:d0:cf:06:97:52:74:b2:
cb:e7:69:a9:7b:df:b4:cd:41:ce:1b:fb:2f:a9:f8:
81:6d:6a:e0:3e:a1:71:c2:b5:e1:aa:3a:36:8b:ec:
a2:16:9e:62:ad:9e:5e:55:82:e2:f7:74:9b:69:5a:
f5:4c:fb:d9:87:e1:f8:5f:2b:a8:72:0c:bc:da:66:
84:95:6d:57:fb:ae:4e:fd:73:ef:b2:94:40:a9:4e:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:80:85:E4:4C:FB:AB:B8:4A:17:2F:68:C5:1B:87:37:CB:E9:18
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:5e:11:47:62:33:9d:07:1e:22:ca:3e:b3:71:80:f1:16:
af:d0:41:68:88:1c:90:a0:b7:4e:8c:08:22:f6:b3:55:33:da:
a8:20:ac:6c:20:cb:68:c2:ea:53:5b:b3:5f:67:6b:65:07:50:
ff:88:39:b5:41:ce:06:7a:72:94:71:04:80:8e:3c:69:5b:be:
0e:b3:d7:14:8a:75:3d:34:40:d2:94:ea:a6:62:0e:cf:ff:13:
8c:e0:6f:a8:65:71:65:09:5e:a9:b9:1a:ef:0e:e7:2f:b4:e4:
00:51:71:a0:a8:7d:1a:72:a8:03:db:c2:b2:aa:86:5b:3d:63:
b0:0b:71:e6:58:17:9d:aa:05:ce:04:26:a5:13:84:10:2f:42:
60:b8:1e:da:5e:6d:2a:ea:d3:8a:00:bc:c4:84:d2:ff:6f:46:
79:a0:6c:28:a5:be:11:11:5f:5b:53:c4:47:67:2d:4d:90:f5:
7c:7a:87:13:aa:f4:6e:21:6b:ba:51:ce:aa:06:1a:4d:8c:3b:
4d:56:8f:c1:49:06:b4:f1:7f:d2:50:62:fd:9d:d0:23:db:3f:
f1:bf:7f:2d:fd:fa:5f:a4:01:ce:50:84:e7:8a:e7:9e:27:97:
00:a4:c2:1b:db:42:d1:bb:10:ba:fa:f5:71:53:d5:42:98:2f:
b4:13:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:47 2025 by rpki-client