Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: CLLRPouxr+bFBYpgI8O/CkspE2IcMefvVRFVxsMZ4UU=
Subject key identifier: 84:81:AA:12:D2:AB:68:AF:EC:A8:43:31:13:57:FC:E9:BB:E2:34:70
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 019A4D740D07C01471233FCAF9296AD1631B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 036D
Signing time: Tue 04 Nov 2025 06:00:42 +0000
Manifest this update: Tue 04 Nov 2025 06:00:42 +0000
Manifest next update: Wed 05 Nov 2025 06:00:42 +0000
Files and hashes: 1: S6SgkEKXXupg9NGyg85ew2MKuNo.roa (hash: Ccy6wkPiSmvGfzLUcrIC/arlCjWDtB/tLTVQ150opBk=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: dn2GtH4seU22sQVQeb4iBA9HaKlJqNvj/K35HwENsl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0d:07:c0:14:71:23:3f:ca:f9:29:6a:d1:63:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Nov 4 06:00:42 2025 GMT
Not After : Nov 5 06:00:42 2025 GMT
Subject: CN=8481aa12d2ab68afeca843311357fce9bbe23470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:27:e8:eb:7b:e7:e6:58:e2:71:3e:8d:7a:
dd:39:7c:5c:23:b4:23:7d:a9:30:a8:c7:c8:2c:fe:
3c:12:b4:c0:ef:24:67:13:76:c5:c2:7c:10:63:45:
75:41:75:cf:de:2f:2d:c1:eb:c0:0b:17:27:9d:47:
e2:43:89:9e:79:0b:89:d9:90:51:b9:80:7c:f0:14:
c9:a7:aa:5b:b9:88:5f:1f:88:73:60:1e:ad:2d:c7:
51:90:dd:c8:83:ff:0b:e7:70:3c:43:61:7b:d8:5c:
9d:79:b3:1e:2e:5a:f5:30:3e:c7:94:14:1b:a6:96:
5f:9a:12:d0:f4:65:85:82:f1:e5:99:4d:41:3e:2c:
bd:d8:99:1c:59:37:c9:97:1c:ed:3d:d8:76:89:88:
e6:3c:49:80:64:ac:11:9f:45:b6:fd:9b:fc:a2:41:
ef:c4:3a:54:96:10:ea:66:a6:55:03:c1:de:4c:2d:
41:d5:77:2a:f5:b5:ab:d6:31:c0:b1:a5:54:d3:ad:
e0:7e:22:06:e6:e8:be:c6:7c:4f:6a:d5:e0:28:79:
40:fb:64:85:4a:60:00:d1:dc:54:e7:b1:9a:48:3c:
41:d1:c8:55:92:da:01:d4:0e:29:5f:5c:af:1e:00:
a3:de:d0:9a:3e:82:62:6f:20:c2:d4:ad:79:58:b3:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:AA:12:D2:AB:68:AF:EC:A8:43:31:13:57:FC:E9:BB:E2:34:70
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:83:66:f9:12:04:d6:fa:71:98:d2:0b:9c:f8:26:a9:54:83:
19:bd:ad:77:e6:c6:3f:cd:45:69:05:15:64:54:9d:64:ba:18:
72:df:7e:da:f8:c3:5e:f0:5e:e1:5d:5b:4e:73:1e:7b:09:80:
7c:40:fd:8b:f5:be:c3:56:d5:2b:19:92:51:88:84:ba:8e:3e:
4a:7a:de:e0:d8:6d:c0:1e:cd:6c:12:24:51:d1:ea:49:82:4e:
51:a6:60:59:96:99:7f:3e:8c:cd:47:cc:2d:f2:9b:d1:26:33:
6c:31:74:0b:fe:d5:02:f6:eb:3b:99:3e:5a:f0:d2:d2:03:ab:
34:c4:39:66:88:ce:48:e7:60:56:79:5d:17:be:dd:66:d9:77:
8e:79:e2:50:ec:40:3e:a6:ef:80:a5:24:d9:9a:86:5b:9b:42:
5d:7e:e8:61:f6:63:7c:1a:fe:2a:0e:0e:47:a0:27:63:e9:c3:
91:60:ec:42:1d:6f:31:20:e7:6f:88:19:8e:1c:76:11:d2:0c:
78:d2:11:4e:56:b8:3f:23:e8:98:8a:f2:6f:99:76:7c:af:53:
fb:6e:4b:57:8c:26:91:c8:f0:e7:9f:69:7d:c4:eb:23:22:93:
12:ab:8d:db:21:2f:97:8b:78:0b:5b:56:db:58:4c:30:7a:f5:
ff:c9:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client