Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: LrNVhmhh9p8xEjASkQ3/DGeMxcj+DgppHYZGSLo/q98=
Subject key identifier: 87:27:65:22:71:5B:54:62:03:51:FB:4E:7E:3C:A1:FE:03:95:89:F5
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 0198D6CD99CE09EDCF92D5FC486F71D96E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 032C
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (hash: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: liyL5j5BwgJQBema50QGOsK+8CKl0AK5dp+GH9wjW6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:99:ce:09:ed:cf:92:d5:fc:48:6f:71:d9:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=87276522715b54620351fb4e7e3ca1fe039589f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:2e:9b:e8:67:ab:da:b4:7a:ae:69:8b:a2:
dc:6e:20:c3:03:a3:a9:e2:c5:2f:c1:1e:40:d9:92:
82:be:91:16:35:f1:f9:ce:56:10:9b:dc:25:08:1c:
96:11:74:af:a5:be:6d:c1:75:cb:01:2e:11:02:c3:
7d:55:1d:d5:b0:a9:6f:ae:6c:b6:ab:f5:52:e5:71:
19:bf:76:e3:55:72:43:59:1e:92:09:3c:de:10:4f:
5a:53:d9:a7:92:c7:de:3a:de:39:8f:8a:4e:50:eb:
f3:55:b8:c4:6d:31:0a:47:9a:93:04:fa:63:c0:bd:
e2:9b:bf:fe:ee:26:ec:72:fb:67:eb:7d:ca:d6:4a:
dd:82:51:de:f7:c1:01:07:51:72:df:40:a1:b4:a8:
c9:fb:ad:89:66:cb:bc:22:3b:53:66:78:1a:8f:27:
2a:45:0e:e0:a3:8d:80:4c:13:ce:7c:53:9c:34:8f:
6b:62:2a:b0:a3:62:a5:ee:6c:6e:07:a0:9f:3c:f3:
b2:40:4f:1b:f2:db:8b:2a:06:53:0a:d7:2d:08:98:
e8:29:25:4b:52:90:e8:3b:87:c4:a9:65:bd:48:64:
f5:16:a2:55:f6:c9:90:ff:6b:47:d1:7b:05:96:8e:
08:15:98:32:65:d5:97:7f:64:6c:7c:e5:1c:f1:9f:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:65:22:71:5B:54:62:03:51:FB:4E:7E:3C:A1:FE:03:95:89:F5
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:53:96:d3:f7:9b:e3:54:c5:c0:32:b8:c4:21:67:c5:76:
95:24:a5:df:10:f4:a8:95:d9:72:c4:69:6c:14:a9:81:b4:35:
c6:99:48:96:06:5c:5b:71:3c:98:f2:dd:b7:e8:8f:b9:23:d7:
98:40:3d:1d:a2:77:d3:40:ba:c6:0a:b5:3e:a6:b6:65:b1:07:
77:04:48:9a:87:8b:fd:21:a2:2d:d7:28:68:7d:ab:5b:0e:08:
24:56:d9:48:fc:be:58:31:d6:91:ab:4c:81:f9:69:7c:df:ec:
a3:7a:a5:aa:2b:49:13:f1:90:b1:77:7c:3b:7f:02:c6:82:f3:
d9:53:9b:5d:46:ea:a1:a7:06:c4:70:fb:bd:b5:a3:19:1d:6e:
04:b4:33:f5:51:27:88:02:3a:d5:e4:e0:a7:c9:d7:be:0c:c5:
33:d2:dc:be:f8:a5:0d:d1:43:2b:6c:08:66:6c:53:20:eb:9e:
8f:e3:df:44:56:d7:c4:65:0c:24:94:24:5f:8a:b5:f2:18:8a:
f9:99:ca:c7:28:51:9b:a0:f3:22:1d:4f:d3:c9:b2:a5:dd:99:
e6:d7:c4:49:84:07:b6:ef:ba:12:e0:95:ed:3a:b1:68:2f:5a:
7f:f6:47:b7:55:1a:84:bd:37:21:9f:99:22:b4:a7:36:7f:71:
7e:7c:39:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzZnOCe3PktX8SG9x2W5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0
MzAwNDYwHhcNMjUwODIzMTIwMDU1WhcNMjUwODI0MTIwMDU1WjAzMTEwLwYDVQQD
Eyg4NzI3NjUyMjcxNWI1NDYyMDM1MWZiNGU3ZTNjYTFmZTAzOTU4OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e4um+hnq9q0eq5pi6LcbiDDA6Op
4sUvwR5A2ZKCvpEWNfH5zlYQm9wlCByWEXSvpb5twXXLAS4RAsN9VR3VsKlvrmy2
q/VS5XEZv3bjVXJDWR6SCTzeEE9aU9mnksfeOt45j4pOUOvzVbjEbTEKR5qTBPpj
wL3im7/+7ibscvtn633K1krdglHe98EBB1Fy30ChtKjJ+62JZsu8IjtTZngajycq
RQ7go42ATBPOfFOcNI9rYiqwo2Kl7mxuB6CfPPOyQE8b8tuLKgZTCtctCJjoKSVL
UpDoO4fEqWW9SGT1FqJV9smQ/2tH0XsFlo4IFZgyZdWXf2RsfOUc8Z9NOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcnZSJxW1RiA1H7Tn48of4DlYn1MB8GA1UdIwQY
MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt
YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz
LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhN5TltP3
m+NUxcAyuMQhZ8V2lSSl3xD0qJXZcsRpbBSpgbQ1xplIlgZcW3E8mPLdt+iPuSPX
mEA9HaJ300C6xgq1Pqa2ZbEHdwRImoeL/SGiLdcoaH2rWw4IJFbZSPy+WDHWkatM
gflpfN/so3qlqitJE/GQsXd8O38CxoLz2VObXUbqoacGxHD7vbWjGR1uBLQz9VEn
iAI61eTgp8nXvgzFM9LcvvilDdFDK2wIZmxTIOuej+PfRFbXxGUMJJQkX4q18hiK
+ZnKxyhRm6DzIh1P08mypd2Z5tfESYQHtu+6EuCV7TqxaC9af/ZHt1UahL03IZ+Z
IrSnNn9xfnw5jg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:36 2025 by rpki-client