Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: 9jTsbOAvIP5uVm48SUofoiM4icluUAvJT7BogkHTJlE=
Subject key identifier: 0B:83:F2:6E:D7:8F:61:68:D1:92:B4:8D:FB:1A:58:F2:E9:67:7E:FA
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019A02235F147604B27D19444609663CBD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 03C7
Signing time: Mon 20 Oct 2025 15:01:03 +0000
Manifest this update: Mon 20 Oct 2025 15:01:03 +0000
Manifest next update: Tue 21 Oct 2025 15:01:03 +0000
Files and hashes: 1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: FLaq56Cao5rWXHYzjEkKtE9cmhyFx0q5BHMxtKY8o18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:5f:14:76:04:b2:7d:19:44:46:09:66:3c:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Oct 20 15:01:03 2025 GMT
Not After : Oct 21 15:01:03 2025 GMT
Subject: CN=0b83f26ed78f6168d192b48dfb1a58f2e9677efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:4d:b1:47:28:67:fc:9a:03:4b:b9:c8:71:
48:02:3a:0f:fc:c0:6e:7f:7d:77:b2:f1:e0:07:63:
c7:21:8d:f3:bd:8b:fa:90:05:eb:32:5c:ec:cc:f2:
76:64:ae:a8:d6:32:99:75:62:08:1a:04:32:ab:06:
7f:22:de:61:93:12:9c:fa:2f:50:0b:fc:60:91:50:
11:87:40:13:bb:a0:21:6f:5e:34:87:9b:3c:81:a7:
a7:56:e4:3f:fc:61:93:64:aa:3a:56:e8:f2:81:d1:
41:89:b0:e0:df:48:b0:58:ae:81:88:fa:87:92:ad:
d2:77:2b:44:c5:e4:aa:ae:cf:2a:4a:5f:25:45:b2:
17:d2:06:7c:27:f0:35:ce:cc:56:5e:ed:39:f0:83:
3d:24:68:7f:d6:c1:b1:a9:7b:af:13:5c:04:c1:74:
c5:02:2f:37:20:2e:e4:a5:34:68:65:be:e4:f0:0d:
18:54:36:37:28:cb:8a:bc:36:9b:98:48:f0:33:5a:
13:75:77:60:0c:c0:b2:5e:13:03:59:73:44:8b:c2:
2e:87:f9:1c:5b:9c:10:6c:7a:aa:aa:9c:d4:d1:fd:
74:ba:5d:6d:5f:95:2e:f5:bd:27:6c:9f:9a:6e:cc:
b8:97:7e:58:b6:ad:25:95:bd:90:4f:f1:7a:2d:95:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:F2:6E:D7:8F:61:68:D1:92:B4:8D:FB:1A:58:F2:E9:67:7E:FA
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:bb:2a:5b:b6:5b:7a:69:25:43:4f:ab:7c:b8:90:f0:83:
8d:99:de:af:cc:53:a5:36:82:c2:dc:42:10:01:b6:25:23:29:
79:ad:b2:c4:7d:a1:d9:28:6a:10:ad:fc:42:b3:40:91:bc:96:
48:ad:05:c0:bb:57:b7:d6:0d:0f:ab:ee:98:0b:6b:af:e3:7f:
d4:a0:6c:e1:1b:4c:a4:98:e2:c3:8c:f2:f3:c3:4c:82:e5:b1:
10:b4:27:0b:0d:69:30:f5:9e:79:85:e4:c8:b1:6e:ab:b9:84:
0b:20:4a:78:bc:87:a8:c2:73:3e:de:67:40:b4:e1:99:37:b6:
53:65:91:90:2e:9d:e8:49:a9:d3:d2:75:51:63:85:b0:9b:1d:
d4:90:18:77:1e:fb:ac:87:3d:dd:c4:89:0a:d5:cf:ad:51:af:
ce:f4:0f:ed:40:ba:db:09:e1:b3:40:90:cf:8c:2b:8a:cb:81:
f7:15:2d:5d:24:a8:7f:3e:60:8d:d9:f6:c9:93:3e:10:9b:f0:
75:3e:7b:a3:27:ba:40:c9:8e:4b:25:19:42:0e:68:1c:94:fb:
f0:a0:f0:6a:ba:6d:a3:5c:b1:19:03:28:8a:eb:46:f8:1d:a1:
80:35:be:eb:d5:84:cb:8f:bb:85:dd:d4:0e:cc:f4:8c:e9:9e:
5c:e6:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:40:03 2025 by rpki-client