Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: 5WNroM7rfOJNz7tfnRQZnXpD3BRFHW7XGN/jnBjlhTw=
Subject key identifier: E0:FB:9C:26:FE:9D:2A:7C:F0:71:34:8C:1F:A2:2B:AD:7E:98:89:F5
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 0199FC58E44B08F3ED29EE56F0F29FB8E464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 07B6
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: hf+jhjWfxoiUXmX5tZ6LHbVzPAIJrcYlfC0Of0sIiNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e4:4b:08:f3:ed:29:ee:56:f0:f2:9f:b8:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=e0fb9c26fe9d2a7cf071348c1fa22bad7e9889f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:70:95:dd:43:92:5c:36:e4:d1:97:51:95:
d1:2c:91:70:08:fa:20:6e:dc:e7:e9:51:c8:e2:a3:
b1:92:85:a3:05:37:e0:bf:31:a5:b4:61:7b:2f:1f:
94:0c:91:e1:aa:43:1b:37:d9:5e:86:f9:83:24:d8:
54:77:8b:0b:23:ee:7a:b7:27:41:fe:92:f0:59:34:
57:c5:ea:6b:d9:42:ac:bc:bf:97:7a:97:2b:9f:d5:
af:6b:c5:7d:93:1d:c1:5b:5b:ae:9c:81:4b:9e:41:
ee:6e:bc:a4:e2:4d:95:1c:a3:b8:34:a8:8f:2f:73:
04:20:8d:b4:12:c1:61:17:ac:a5:cd:9b:5e:1b:3a:
57:9a:43:16:52:57:8e:3e:6b:46:09:0f:bb:c8:04:
a0:d1:02:3d:45:08:3e:a4:79:d3:9d:53:83:37:ed:
96:8c:6f:3a:f0:a6:8e:98:42:2b:ba:f1:5c:58:8e:
ba:3f:5c:15:d7:98:08:cb:d9:c0:4d:20:39:36:4d:
7a:e3:53:df:8d:3a:19:3b:c6:f8:91:d5:2f:3b:41:
67:d8:25:b3:82:f7:9e:34:0d:93:f6:48:00:53:67:
d9:1c:ca:76:b1:d1:43:dc:5d:03:cd:64:f7:7d:1b:
fb:c7:7f:c5:53:43:2e:c5:a1:8a:0e:fe:4d:b0:fb:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FB:9C:26:FE:9D:2A:7C:F0:71:34:8C:1F:A2:2B:AD:7E:98:89:F5
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:47:e8:a5:ac:0c:63:9c:69:57:fb:71:f3:b6:47:5f:58:2e:
41:e4:1c:71:23:19:b4:78:39:a5:8c:93:f9:12:5f:c5:19:8d:
8b:60:27:21:dc:a5:85:94:68:82:e1:2d:bc:50:f5:ef:ad:bd:
1a:d6:18:1c:b3:86:7d:f1:53:a7:05:19:cf:91:31:af:f1:d3:
4f:2f:2e:ac:0f:f9:59:6e:09:7b:b0:4f:bc:02:29:aa:75:be:
41:e4:9b:73:ab:60:32:56:b0:94:d1:0d:dd:14:ec:e4:18:ac:
0b:73:bd:aa:32:47:88:41:a0:94:ac:e8:a3:27:ec:4a:5a:35:
ed:04:92:20:fe:1a:08:14:2f:c9:1b:62:dd:cb:d5:5c:c6:d3:
06:c9:ce:2b:30:67:45:2f:f6:3b:b0:9e:97:bf:d5:3f:1d:3f:
12:16:77:03:9c:37:2c:43:72:b2:50:b1:8b:21:27:ac:a2:47:
93:e1:76:f7:71:0b:9d:f9:d8:cd:bf:be:35:75:d9:5e:af:da:
1c:1f:f6:3f:df:70:69:22:0a:57:d4:45:34:d3:02:53:27:77:
f6:b6:9a:44:72:99:06:c1:26:be:91:16:36:72:44:a3:a5:8c:
e7:0f:31:4a:d0:df:25:04:81:16:1a:a4:fb:47:8b:4e:5c:b5:
33:74:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:15 2025 by rpki-client