
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
File: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft (raw, json)
Hash identifier: GGEyfzfR8nq+ccqY47s68j+wQAQS+bsH4IYHWTJdqto=
Subject key identifier: F4:14:E6:3B:0F:B1:02:E9:C6:50:6B:84:68:6A:AF:85:7C:4B:BB:53
Authority key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45
Certificate issuer: /CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45
Certificate serial: 0198D54E049C933B97867AB779D83258AE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
Manifest number: 47
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: V6kqum_Jf9Ha9a7KMi40nzQHnZU.roa (hash: j6p3nEZhSZ7XPphSK/sX7nj13tsrJF7Mp7GMxj36D0k=)
2: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl (hash: GSc4z975LeodIrDxkEaZUs5c2mNgjk05bp2RorumLdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:04:9c:93:3b:97:86:7a:b7:79:d8:32:58:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=f414e63b0fb102e9c6506b84686aaf857c4bbb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:cb:1a:20:b6:67:98:34:a7:fd:86:0f:66:
be:ad:e3:4d:8e:96:a3:2b:4a:23:f1:fa:f7:69:23:
ac:7c:8a:13:2d:72:2b:07:46:80:4b:ff:32:ef:d3:
df:7c:12:23:b8:f0:fd:42:99:4d:76:fb:34:88:29:
77:86:48:3b:1b:e3:37:3e:04:94:b1:a0:ea:c7:80:
de:63:c0:59:7e:ba:6e:45:dd:f2:ef:54:eb:97:f0:
0e:a7:e0:f4:32:21:aa:61:0d:b2:0c:cb:65:8b:2f:
e4:fe:c7:64:68:7e:0e:cc:58:d2:4a:8e:43:ca:ac:
32:87:30:d6:79:e7:19:f0:d3:74:5b:ae:b5:e1:84:
1b:b3:55:50:1a:3e:ed:ec:94:23:01:49:d9:07:21:
db:e3:58:4a:7a:82:dd:cd:ee:5f:6d:fa:92:6e:c7:
66:d0:11:22:d6:81:3a:c4:cf:b6:21:7c:f2:5b:30:
a3:51:51:a3:7c:a2:e8:89:39:12:7a:5a:81:88:df:
e8:da:db:f2:29:e4:40:cf:9a:e8:77:0f:89:a5:ca:
d7:76:a2:dd:f6:47:df:7b:fc:71:67:e5:eb:fe:8d:
22:81:a3:a3:38:8e:ff:e9:44:5a:9f:1c:ac:b0:f4:
10:11:56:f9:1a:c0:e7:6f:e1:70:b5:ee:f9:11:7c:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:E6:3B:0F:B1:02:E9:C6:50:6B:84:68:6A:AF:85:7C:4B:BB:53
X509v3 Authority Key Identifier:
keyid:C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2b:2e:23:f0:fd:c2:0b:96:28:73:81:a3:e7:07:a8:b9:da:
04:91:1d:2b:f8:89:ef:3d:39:52:f5:bd:88:8b:30:09:77:da:
aa:df:e6:62:40:00:05:76:42:e9:eb:89:7e:4c:ee:5b:4b:af:
fa:a4:37:26:46:e5:d5:84:33:d1:50:66:cc:6f:03:74:ba:9d:
40:34:fe:30:a6:00:82:a9:66:0b:13:32:c5:66:86:1e:fd:f5:
c9:bd:05:e3:11:91:31:b4:9e:d5:12:32:c5:96:3d:ef:16:e8:
03:cc:f1:e3:fd:0f:87:73:a0:80:88:ed:00:e3:a3:ee:ef:da:
eb:46:91:54:22:68:e3:e2:86:79:bf:11:94:65:1f:87:70:6c:
79:c8:c7:47:4d:69:ac:85:b8:29:b4:5b:7b:c6:94:ad:1e:84:
c8:3b:9f:68:ab:bf:8f:cf:8f:1a:20:ea:3c:3f:d6:ca:c8:56:
c5:4c:4e:c3:50:d5:b2:0b:b1:17:13:a0:2e:4f:4c:fc:c4:a9:
02:ce:6c:79:a3:90:3c:e7:15:a9:1a:db:63:db:5f:b4:3d:0b:
1f:85:8e:ea:46:76:29:02:6a:20:9a:34:7d:dc:8a:51:86:86:
73:fa:78:d2:dd:83:1a:17:ed:35:4d:06:9b:9f:7c:b0:63:d4:
41:7a:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:09 2025 by rpki-client