Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: jjm60B12BSGUP/2Y4kbg80isSlGaQgQ1oGwdLhflZso=
Subject key identifier: 28:B9:74:47:CA:4F:D6:26:DA:0C:87:A1:38:04:F5:B9:24:60:7E:27
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 0199FD6B17CAC7CD469F1943C7F7097ED084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 1484
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: qptSZ2XpOAOxaz7moTgQi3lsLeM.roa (hash: KtrtO/sBSgHAN1gAhTfDKw+KYUTZI/b5RNJ8EjfK/UU=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: X9kAYHewmiXy4UW2XQSSM9USfvE/5dKv0dD+psfazFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:17:ca:c7:cd:46:9f:19:43:c7:f7:09:7e:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=28b97447ca4fd626da0c87a13804f5b924607e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:13:b8:f0:e6:8c:71:14:b7:8c:c5:02:bf:
0b:01:20:57:0e:3c:1f:6c:b5:86:65:1f:c1:da:92:
66:e8:59:f6:ed:ab:e9:b8:03:8b:f6:da:bb:e1:a8:
49:e5:af:07:31:61:74:02:c0:a3:cd:4c:78:af:95:
e7:ba:ca:c1:40:b6:48:4e:ce:02:c6:4c:5e:29:f1:
27:c1:01:43:d8:0d:36:15:f9:08:47:c3:dd:65:e0:
2a:b2:46:e5:d4:92:6f:ce:b1:22:c0:54:0a:be:d2:
93:39:a8:03:4c:08:c0:f6:ee:39:2c:b1:e5:2e:26:
c0:74:3f:6c:bc:71:7b:eb:88:6d:a4:d9:7c:5c:bd:
e3:f1:16:2c:7b:64:7b:87:1f:c7:7c:16:81:32:68:
41:85:f9:8c:2d:a6:73:5c:23:9d:3c:11:ce:c0:bc:
7b:d5:1c:96:b8:c0:73:26:e3:ad:37:e2:12:59:2a:
c0:09:b9:28:64:d7:07:64:22:ac:ec:33:87:5d:1f:
96:25:a6:f7:e6:85:4c:7d:35:ac:a9:ef:ad:e6:ba:
b5:05:b6:82:b3:64:f6:57:b4:e7:3d:d3:af:e8:e1:
22:e6:3d:c0:f0:cb:88:75:ce:4c:09:93:9c:7d:6a:
ed:6c:dc:00:07:a9:60:26:f0:e9:f4:4a:86:23:7d:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B9:74:47:CA:4F:D6:26:DA:0C:87:A1:38:04:F5:B9:24:60:7E:27
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:13:0a:5a:35:bc:c6:2e:06:c1:c5:2e:82:7e:f0:2d:8a:
be:8b:63:45:d0:06:c0:d5:e6:c1:f2:60:23:c5:52:32:2d:17:
19:34:42:ee:65:8e:6a:61:21:4e:e4:65:9d:24:6e:de:50:db:
12:cf:24:a5:84:8f:c1:3c:2e:aa:34:cd:8d:62:62:e4:6f:fe:
54:ed:44:45:73:e8:d6:39:cd:af:f3:0b:ca:61:11:49:33:eb:
81:a7:d7:e0:c0:98:9e:7c:54:f1:4c:9e:d4:27:81:c4:46:0f:
c1:db:41:7d:80:4e:8e:0e:46:82:c3:bf:c6:d5:05:53:03:67:
84:72:03:f2:3c:a9:f9:4e:79:2d:c9:5e:66:a9:65:24:e0:29:
d7:85:83:32:5d:f7:dc:0b:21:d9:eb:b0:c3:c0:89:89:8f:f1:
f8:69:26:09:d5:91:31:aa:d5:cd:39:22:ac:d0:31:ba:ce:82:
85:a3:8a:fe:b3:57:17:9c:ed:ef:d0:fd:df:c5:d5:c3:25:f0:
24:1d:15:7b:5d:57:69:7d:8e:5a:9d:4b:dc:f8:85:0a:a1:a7:
dc:0c:96:07:d5:9c:a2:f9:3d:bb:b9:0c:bf:29:28:26:ee:39:
3b:d0:49:bc:1d:31:0f:86:fb:d7:10:83:70:24:88:87:19:ff:
ad:bb:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:48 2025 by rpki-client