Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: 0ZHTrqfxaHRtSqntgQSTRlKCSfaGdd5kaZK0GIUDyns=
Subject key identifier: 29:DC:FF:43:D4:C7:8D:31:AB:D5:1C:3F:AB:43:7E:6B:F3:AD:9E:6F
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 019A4DAAD1472DD99D91E6EFC3E67E4E96A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0F8D
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: gjrRpC38KovS/aICsiqjDuC4AOS7+uijHEsKdR7RBmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d1:47:2d:d9:9d:91:e6:ef:c3:e6:7e:4e:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=29dcff43d4c78d31abd51c3fab437e6bf3ad9e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:a5:81:9f:2c:3f:69:5c:1b:f8:46:05:d1:
ee:01:ca:a4:35:bb:2e:f0:1c:42:d7:62:6e:47:b5:
0c:82:18:cf:8b:37:7d:74:f7:e9:38:49:09:32:c2:
5d:80:9d:61:60:0c:dd:4b:ab:92:ab:96:d0:25:3c:
28:03:48:82:aa:f1:5a:1f:df:a1:ed:83:a7:5f:65:
57:fe:33:68:e4:c6:81:f0:cd:61:e0:b4:34:8f:d4:
b2:55:9e:0b:c9:cd:98:a9:f7:9a:ce:6d:6e:64:96:
89:a4:b9:05:c5:9d:e4:8e:04:19:68:6e:0c:3a:88:
26:d7:50:d3:02:1f:81:13:30:5b:ec:9b:42:44:0b:
0c:9e:7f:e9:b8:40:c4:7e:a2:3f:b8:9c:d4:2e:92:
55:b1:03:8e:3e:e2:57:c4:67:f1:ce:a0:ef:ce:42:
78:e1:f4:5d:0a:57:27:64:98:a6:e3:21:a9:8a:11:
72:08:29:2e:61:18:33:b8:c4:6a:32:69:62:20:bc:
3d:1b:50:58:f4:f3:f7:33:d3:fc:f9:78:7b:e6:ef:
b8:15:0f:ce:60:08:09:5b:d9:98:df:8a:b3:88:b9:
03:01:08:38:84:73:ab:a4:cc:7b:8d:8a:b5:44:b5:
1b:b9:f4:35:d1:9d:4f:30:6e:3d:33:c5:24:02:bd:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:FF:43:D4:C7:8D:31:AB:D5:1C:3F:AB:43:7E:6B:F3:AD:9E:6F
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:23:36:c6:b4:4f:d2:a5:fc:ab:8b:1c:b9:2a:60:e2:50:
d0:0b:16:60:15:71:40:7e:a7:65:ce:e5:d2:d2:d6:f2:2a:4c:
3d:0a:5d:cb:d7:a5:6a:cf:d2:bb:a1:b1:10:a5:23:ba:48:30:
af:3b:79:b8:36:f7:20:03:5a:af:f6:2c:41:c9:74:94:eb:ae:
5f:0f:50:96:ca:1f:54:9a:d6:4a:b9:5a:a1:19:3a:58:b6:15:
bf:c3:7f:68:94:a5:a0:c4:72:44:a6:f0:db:8b:84:a6:e7:0c:
32:ff:73:8e:24:07:80:60:ff:da:e3:1b:2d:07:3c:eb:75:63:
eb:9b:4a:67:f0:e7:4a:eb:bf:69:4f:92:83:96:ff:50:4b:24:
1f:4d:31:11:d6:e2:fd:f9:17:53:b4:df:ee:80:d2:92:96:97:
bd:6f:b2:7c:26:40:d8:8c:4a:6f:d4:ab:e8:f1:27:03:d0:15:
8e:49:00:5a:92:0a:c1:04:97:ee:3f:d8:a9:59:b3:e9:26:04:
01:08:a9:6e:78:b9:c9:24:87:a1:7e:35:94:6b:77:0a:43:6e:
16:4d:52:ee:e5:c0:82:a7:1d:bf:87:4f:37:a0:46:05:65:4a:
c7:a0:6b:45:89:9c:24:1d:d5:30:c2:1e:b1:a8:40:8e:10:cf:
04:97:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:44 2025 by rpki-client