Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: YnziIMCY/WIyhhhMobz9q/fCtw3hRbQulvZfhJQDlrA=
Subject key identifier: F4:28:FE:18:A6:1C:34:0E:C0:13:6F:66:8B:70:92:C0:5E:3C:AE:32
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 0198D73B88E81A9440D4C7B1ADFCADD1478F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0927
Signing time: Sat 23 Aug 2025 14:00:59 +0000
Manifest this update: Sat 23 Aug 2025 14:00:59 +0000
Manifest next update: Sun 24 Aug 2025 14:00:59 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: cVOXDZkexg4vRuCxxuFv0q5smSzVlxACwQ95FssRe5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:88:e8:1a:94:40:d4:c7:b1:ad:fc:ad:d1:47:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Aug 23 14:00:59 2025 GMT
Not After : Aug 24 14:00:59 2025 GMT
Subject: CN=f428fe18a61c340ec0136f668b7092c05e3cae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:10:37:20:1b:7e:11:e1:f2:d6:cc:6a:cc:
62:28:fb:54:9a:ad:c5:fc:84:23:7b:a1:43:e2:e6:
4c:a9:96:64:5d:87:a4:12:ef:7e:06:c8:c5:57:a6:
5f:2e:c6:fc:ab:0e:6e:85:0f:b4:3e:97:54:ca:cb:
64:30:d3:ac:20:a7:e3:2b:b9:4e:b2:d9:f0:c5:0f:
0c:a2:1d:2e:0a:19:de:35:b6:4b:52:ab:18:66:e5:
0a:9b:35:6d:08:1a:2b:e1:74:9f:48:09:99:9c:70:
27:11:d3:e8:4c:de:76:b4:d0:fe:f9:15:74:26:88:
a5:d4:87:3b:48:cc:1d:6c:91:02:b3:d4:91:e5:95:
3a:09:fa:07:e4:2c:ed:6b:7f:b8:58:39:85:51:6f:
c2:16:53:35:10:dc:aa:ef:1b:c0:60:8d:52:50:8b:
59:cf:d8:2a:33:b7:d7:f9:fd:17:6a:c7:f3:ce:0d:
73:6b:8d:51:0a:18:dd:96:d7:31:a1:f1:af:ef:57:
c0:60:2a:06:06:f8:52:56:a2:fc:ca:5e:e2:8d:33:
eb:bd:01:a9:8a:28:57:42:1f:1c:72:2c:3c:dd:25:
18:66:ea:06:12:b8:f3:90:92:98:dc:29:42:e6:4f:
4a:c4:16:3b:ce:47:e6:13:1b:72:cf:8c:d9:fb:11:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:FE:18:A6:1C:34:0E:C0:13:6F:66:8B:70:92:C0:5E:3C:AE:32
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a4:0c:41:54:c3:1f:03:5f:be:48:1e:ba:6b:be:6d:6c:f0:
8e:99:53:1b:a8:d6:ab:da:e4:37:ed:b4:37:f1:6f:e7:fc:fd:
c2:7a:8a:e6:37:62:49:f0:8a:76:05:00:49:02:49:22:71:d2:
f2:dd:33:ad:7b:5e:6a:ed:d4:fa:e3:ad:ad:d9:d8:6b:fa:f4:
d2:31:dc:f3:8a:f6:15:56:b2:b8:22:86:75:43:63:47:f9:55:
b5:04:99:e5:84:ab:30:75:32:aa:7c:56:ce:d5:8b:4e:f9:4d:
3f:ce:58:5a:db:be:e8:62:16:cc:6e:57:a2:8e:5c:4e:68:b1:
f8:dd:89:50:2d:87:e0:75:bc:cc:73:76:d3:95:1d:67:bc:6a:
a5:71:2f:0c:f9:ef:ec:10:78:6f:b7:c5:36:51:90:1f:90:0c:
7e:2f:a8:a4:67:45:cc:64:6a:2b:d8:f1:a9:ca:25:03:c7:0c:
a4:c9:14:8e:24:db:84:4f:dc:c5:c3:df:d3:96:1c:27:d8:ff:
c5:1b:7a:7f:ba:70:9b:6d:c2:e3:a3:aa:6d:dc:cd:8b:63:e5:
d2:0b:8a:48:ed:24:af:80:2e:61:6b:1d:b4:9c:aa:ab:5a:fe:
06:ab:ee:b7:84:88:f1:19:33:84:0a:24:31:a9:70:77:2c:6c:
15:cc:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:30 2025 by rpki-client