Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: qh5+9dgbY757eCqCbwSpxlzG9TJNMCoVkOV6fz1UWoY=
Subject key identifier: 67:C8:3F:F9:42:C6:41:E5:41:6A:30:73:D4:53:16:DE:C2:23:8E:B6
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0199FBEB3B54EAD8CAEB42339BA80CBF55A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 14E5
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: ylgpJH3h+dm731sozrDtlEsgw1mVLcVr/Baew0fW2Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3b:54:ea:d8:ca:eb:42:33:9b:a8:0c:bf:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=67c83ff942c641e5416a3073d45316dec2238eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:d9:38:4b:28:1f:95:a6:42:23:f0:a5:f5:
80:51:e2:89:88:48:ce:23:e6:fa:9b:cb:cd:cc:78:
78:36:fb:f7:08:81:27:ea:42:98:27:a7:9b:80:ed:
45:a6:26:ba:14:7e:a5:7a:c5:32:c6:4b:86:b0:bc:
6f:84:19:38:63:20:8e:08:fa:db:49:db:c1:8b:2b:
86:8d:bb:47:86:d6:31:5a:81:14:86:b3:87:cb:5b:
71:6e:62:a4:72:03:9e:dc:78:f6:d4:df:e4:bb:fd:
21:49:36:bd:32:72:11:ea:89:d7:c5:6e:11:cf:61:
f9:07:eb:18:7f:64:69:f4:7d:9e:8c:b9:b1:1b:78:
64:b4:1d:b1:99:98:10:f5:d3:6c:9a:98:de:6a:8e:
3d:3d:e6:f1:a4:14:c1:66:e7:0b:e9:ab:17:b7:fd:
d5:f7:88:cb:f7:69:f7:5c:1f:f9:80:29:d6:c4:6d:
0d:a1:a9:8f:95:12:f9:00:1f:46:d5:d7:e6:3e:fa:
e5:2c:45:87:03:76:09:cb:21:58:b2:b7:df:ef:0e:
69:dd:28:9e:cf:36:28:f8:9e:c3:89:d2:1f:46:a5:
ff:36:19:da:fb:9b:06:9b:c4:86:a1:96:dd:11:18:
b5:89:58:b9:4d:87:c1:e7:ef:10:69:7b:f6:a2:75:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:3F:F9:42:C6:41:E5:41:6A:30:73:D4:53:16:DE:C2:23:8E:B6
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dc:fe:86:6f:a5:10:51:d1:e7:31:e7:db:99:6f:df:07:23:
28:10:51:8a:8b:b3:b9:18:9c:6d:7f:0e:21:b1:a6:55:66:58:
cb:ee:bb:44:6d:20:97:b5:ad:8c:85:5a:f9:e2:a1:72:34:cf:
c2:51:c6:3c:e1:24:d1:f8:9c:db:b1:45:4c:be:e1:1d:ff:43:
5b:a1:ee:36:62:6c:1d:85:01:7f:1c:0b:41:13:f9:5d:50:43:
60:d1:ee:e2:b5:eb:c3:bb:61:28:4e:d0:01:dd:e5:b4:ab:03:
e8:5d:21:36:0d:b8:ff:ab:53:ea:67:68:b5:26:9f:9b:55:65:
ec:e3:ac:ba:e4:17:e6:ab:e2:d5:2d:ef:f1:e8:5b:96:e9:55:
4e:bd:a3:1b:f3:9b:ba:2c:04:86:d9:23:a1:41:93:13:38:82:
04:66:d1:66:f7:1a:ae:9f:90:e4:e3:78:69:97:9b:84:bd:22:
24:b5:a2:ea:1c:01:cc:0a:e1:c9:11:ca:89:16:e3:64:f2:8b:
57:c1:a9:70:96:a1:31:a9:f7:f8:6a:b0:cc:30:40:5a:f9:33:
a8:a8:95:b5:e1:0e:d4:60:5d:ea:05:89:ab:30:14:e6:56:db:
d8:c0:6f:68:43:70:30:b5:d1:fa:f7:8e:ca:1a:63:83:0d:dc:
47:d5:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:42 2025 by rpki-client