Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: n/B+ae6IvaWcsblrnIYm7Kxb763hgW+o1iMUoXQDRJo=
Subject key identifier: 31:50:A9:94:B2:44:A5:C3:B4:D7:5A:43:2B:BF:B1:7E:E2:46:52:80
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0198808B0E72296E49A815EE55C5B4DD8761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0380
Signing time: Wed 06 Aug 2025 18:00:53 +0000
Manifest this update: Wed 06 Aug 2025 18:00:53 +0000
Manifest next update: Thu 07 Aug 2025 18:00:53 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: +GPzV/wQjOch+2yZ1yAV96L1FA+hGmsEQev7MngKUos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:0e:72:29:6e:49:a8:15:ee:55:c5:b4:dd:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Aug 6 18:00:53 2025 GMT
Not After : Aug 7 18:00:53 2025 GMT
Subject: CN=3150a994b244a5c3b4d75a432bbfb17ee2465280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6e:0c:65:d8:16:e5:a6:72:ad:ba:62:30:f3:
28:97:c3:77:f3:bd:36:77:16:1f:74:f9:15:07:a8:
52:81:08:5a:92:23:3a:53:28:81:62:30:02:4c:dc:
64:67:31:0c:f5:4a:b1:75:4c:25:f9:bd:9d:e0:1b:
24:e6:e0:76:5a:7f:75:67:85:93:b6:ad:77:29:d8:
fa:61:ae:54:33:de:bf:32:3a:4b:18:17:a2:0f:cf:
6a:83:e7:ed:44:2c:aa:bb:b3:ee:43:0a:be:73:73:
91:56:90:6c:22:4f:08:00:59:c5:ea:d7:23:d7:95:
10:b6:4e:4d:08:95:0e:2e:8f:4b:07:1d:8b:05:03:
98:b7:e0:b9:6b:72:2b:7a:d1:db:53:2e:21:84:d6:
c8:97:7a:41:81:6d:11:1d:8e:c5:db:eb:ce:44:81:
84:12:82:05:20:ca:f3:f6:cb:33:34:62:f3:3c:95:
2b:74:34:c4:c7:30:59:2f:f0:1b:2a:41:d1:f7:21:
52:83:d0:6c:72:c3:79:29:b1:32:ed:30:7c:36:32:
69:5c:b9:e9:29:c5:fe:f4:1c:43:08:50:e4:52:75:
b9:91:1c:83:6d:71:eb:de:22:d1:7f:0c:8b:f0:43:
f3:38:83:15:93:9e:c5:ae:75:2b:a6:e5:8b:c6:5e:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:A9:94:B2:44:A5:C3:B4:D7:5A:43:2B:BF:B1:7E:E2:46:52:80
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:19:79:d8:97:e5:ab:d4:dc:8e:25:b7:4e:ef:de:e7:80:
08:6a:66:5f:f0:ea:32:cc:88:26:f2:5a:00:c8:74:35:90:4e:
73:bf:be:31:67:7e:89:4c:59:7c:c5:7e:d7:54:f3:59:38:62:
03:a3:cd:ef:0f:2d:68:97:13:38:56:73:43:dd:7b:46:d4:b7:
f5:95:e7:65:40:02:21:0a:96:da:79:b5:05:63:b1:d6:2d:2a:
59:72:ed:0a:3f:5e:8a:d2:60:55:5e:57:43:3f:35:78:77:00:
c1:f9:fe:fe:48:e5:55:da:62:1d:dc:56:30:c6:2b:5a:27:76:
73:f6:48:e3:99:65:a1:d1:75:af:ce:e1:e7:3b:fa:33:c0:bf:
cc:76:4c:02:23:77:1b:51:1f:11:ac:61:95:f6:38:9a:d5:22:
ae:2b:dd:ea:e5:53:c7:19:a2:25:dc:c6:12:29:d9:72:92:00:
87:4b:00:a1:92:1e:56:fa:c5:61:91:4d:9e:7b:15:60:8f:e0:
b5:68:b0:f4:fa:de:d5:82:b1:9f:4a:20:5c:78:fd:26:2e:fc:
48:ec:57:fc:8d:bc:9c:d6:1d:b4:5a:3f:c0:37:4e:f9:5d:ef:
ee:de:ae:2c:17:73:29:60:c7:fe:04:95:3c:70:88:c8:a1:84:
c5:00:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:00 2025 by rpki-client