Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: uTXeiK5nhpaQ/urmme23tPNUroTu8X6Bf/pRbAhlrDk=
Subject key identifier: 5A:41:A5:CD:48:A8:45:3C:EF:34:88:2B:D2:85:B4:7E:1B:56:37:B1
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 01988DD8A8C7A5D2F2372160DD00648EA0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0A32
Signing time: Sat 09 Aug 2025 08:00:43 +0000
Manifest this update: Sat 09 Aug 2025 08:00:43 +0000
Manifest next update: Sun 10 Aug 2025 08:00:43 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: wxiao+TYU6jtb6jwPeOnS/qLV8RoKBioRgnHUU0Ifac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:a8:c7:a5:d2:f2:37:21:60:dd:00:64:8e:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Aug 9 08:00:43 2025 GMT
Not After : Aug 10 08:00:43 2025 GMT
Subject: CN=5a41a5cd48a8453cef34882bd285b47e1b5637b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:62:fd:c2:c3:d8:3b:1f:f0:0a:0e:05:6b:
9a:6f:23:87:d3:1c:4a:7a:ec:ad:ff:38:ed:d0:bd:
9a:8d:20:a2:19:57:33:0e:c5:7c:b2:83:3a:69:53:
00:51:b4:06:c0:2d:26:f9:80:8f:e7:41:db:7a:8e:
96:d3:ee:71:44:3a:41:80:89:5f:2f:42:5a:8d:ba:
ed:05:81:6c:53:1a:c1:13:57:57:20:12:a2:cf:a9:
81:50:fa:3b:48:6a:7b:42:64:18:19:82:94:c7:65:
37:14:06:5a:af:55:16:1d:c0:ed:9d:e2:9c:d9:a2:
68:42:4c:a5:7c:01:ea:02:53:62:3f:de:81:5b:78:
59:11:79:f3:32:fe:84:78:5b:61:86:c7:5c:66:4e:
52:74:0a:20:bc:d7:87:a9:6a:21:cb:77:c7:0c:d4:
90:a6:06:f8:65:a5:e4:da:d4:30:0b:fb:4a:e4:e2:
04:d3:1c:e4:ff:d6:0f:94:02:d4:b8:32:58:3d:5f:
a7:f3:51:4e:eb:61:07:b9:65:fe:bf:ae:ca:77:5a:
07:f6:29:0f:ba:37:03:c2:a5:c7:cf:14:26:a3:00:
ff:26:eb:ad:7e:a7:8a:0f:08:89:8f:31:3d:c0:02:
69:0a:0c:0f:77:0a:c2:41:c5:cd:6a:bf:2a:79:7f:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:A5:CD:48:A8:45:3C:EF:34:88:2B:D2:85:B4:7E:1B:56:37:B1
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:89:07:c0:7d:0b:cd:45:19:15:26:42:9d:a5:a0:dc:59:
ac:ac:ec:80:95:b7:3c:bc:27:60:35:34:57:ff:ba:38:76:b9:
a4:d2:0e:77:16:7c:57:80:00:b0:97:8c:91:d8:7e:49:da:1d:
1e:aa:e8:c3:ef:7e:e7:eb:a7:2b:1c:d8:54:59:49:9f:a1:5f:
1d:76:98:5e:fc:45:56:e6:d4:d8:c6:83:8c:7c:cf:d9:56:81:
e8:b3:95:ab:99:14:ad:fe:74:34:09:eb:fe:00:51:1f:c5:b2:
f2:de:f3:fd:61:9a:dd:79:72:c7:40:c3:c9:c7:46:f8:e5:b1:
48:79:c0:c8:3b:98:ee:8d:71:02:e9:5c:d4:da:ba:6c:7e:d4:
60:ae:35:bd:03:1b:51:c2:9f:d5:0a:7b:ea:4f:73:39:ad:89:
06:43:40:17:a9:7f:63:c6:8b:0d:6d:e5:82:b1:f9:cb:59:4a:
23:00:f7:f9:b4:5f:eb:3d:b0:6e:ef:79:86:f0:16:40:f7:f1:
68:87:23:43:7d:b0:15:f8:84:5e:a3:ce:b1:54:0a:dd:84:59:
bd:06:b8:33:b0:83:45:38:9a:da:dd:d5:6d:c0:d9:fe:25:4b:
e6:58:a4:03:dd:ef:1f:92:2b:03:83:c0:50:26:94:f1:f6:9b:
d4:7d:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:45 2025 by rpki-client