Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: hkuOXQ9DqmXVj/XasKbKjLAPxNjvPQpz/7f/Pt6i0bE=
Subject key identifier: A0:6C:B0:A1:1C:FD:96:70:BE:B8:E8:E0:6A:8E:29:DE:B0:A4:50:DA
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0198D5BC37787B0FA1D05C1A3AE025443F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 05CE
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: sXhavGOAkcRiSDdr7yMaDcOV0LmQ/hBcNW3ZpFeatS0=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:37:78:7b:0f:a1:d0:5c:1a:3a:e0:25:44:3f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=a06cb0a11cfd9670beb8e8e06a8e29deb0a450da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:39:84:20:65:ee:15:ab:f3:e1:4c:66:03:
61:91:f0:3f:29:e3:58:40:41:a5:3a:5e:c9:66:72:
42:f2:93:7d:bb:77:b8:54:bb:79:20:33:53:9d:63:
3d:06:32:a2:2e:76:ac:f4:70:ef:b5:da:d7:03:05:
fc:08:81:c9:9a:87:f8:37:50:d7:8f:fe:54:5e:0e:
e6:d8:74:21:da:7d:11:9d:3a:02:3c:9a:e3:74:76:
42:4d:06:d3:70:ee:29:48:d0:f5:ea:2c:c7:db:27:
1c:4e:bf:7a:fe:f7:75:e5:b9:9f:62:84:01:13:2c:
72:3e:96:ab:b2:de:9e:4e:3d:90:8c:68:63:b1:80:
6d:49:1e:9e:f6:ca:90:8a:b7:f4:b0:c4:2b:d4:5a:
18:5c:ca:04:42:33:66:ff:a4:7c:0c:ba:34:ac:a0:
cc:34:e8:e2:f6:d5:b3:3d:03:2b:1b:ca:84:1d:e0:
d0:8a:53:b9:62:a1:1b:94:71:46:5f:df:65:db:4d:
1e:2a:d5:f1:49:dc:12:a9:47:b8:e2:56:77:66:18:
21:12:34:1a:2d:4f:81:13:ae:aa:cd:d4:38:a3:e1:
3d:3c:de:95:f6:89:a3:09:ac:71:7c:c9:fc:e0:c6:
f5:b8:32:a4:5a:13:bb:74:fb:e1:13:0d:fd:4c:c1:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:B0:A1:1C:FD:96:70:BE:B8:E8:E0:6A:8E:29:DE:B0:A4:50:DA
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a5:8e:0d:fa:16:dc:39:e9:02:e0:bf:8c:ce:05:5d:32:48:
79:88:0e:b1:91:95:a8:14:fc:6c:b1:3a:1d:93:ad:b3:b5:ed:
ab:d6:9b:bc:55:ec:02:f5:3b:e9:8a:bf:01:99:b3:7c:77:ec:
64:b5:c1:07:07:38:a0:a9:66:d6:e4:ab:8f:aa:cf:eb:a3:3a:
03:f0:f1:1f:54:0f:74:94:2c:ef:27:0e:fb:69:b1:cc:d5:d8:
84:73:55:ac:7f:69:80:b3:85:d0:b4:7c:e0:6b:47:83:6e:81:
6f:e0:a8:53:f3:32:43:03:ef:45:ba:4f:49:7c:5e:2d:99:2f:
27:18:17:c8:55:d9:3e:88:40:00:d3:d9:e3:f9:fd:72:d3:72:
19:73:ea:f6:78:8a:bb:83:25:85:75:d0:61:94:78:c4:0f:33:
a2:5a:e3:07:12:5d:a6:a3:ae:10:07:61:7d:22:94:3e:a8:df:
7e:cb:6e:52:08:fd:62:fa:b5:5b:18:04:c5:2f:97:7f:1c:61:
e3:18:f7:14:ea:79:08:41:0a:ab:9a:b7:aa:3c:96:c1:20:a4:
0d:19:16:16:05:d2:dc:26:fa:b5:83:78:09:e2:1b:d5:c3:e1:
52:06:7c:19:02:4f:32:13:bf:0e:61:1b:5d:ed:0b:52:1c:a6:
a4:93:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:22 2025 by rpki-client