Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: HSGrFPrF0MF1ZiTrH9Zt58B6Ngm67xfg4ARUn7+9SmI=
Subject key identifier: DC:ED:A7:67:DC:2E:4A:8A:76:72:98:B8:8B:67:7C:6F:AA:C6:7C:82
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 019A011105E4FA75F6B35BB5883592974533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0669
Signing time: Mon 20 Oct 2025 10:01:24 +0000
Manifest this update: Mon 20 Oct 2025 10:01:24 +0000
Manifest next update: Tue 21 Oct 2025 10:01:24 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: XENYalTOilRVCcVUdWqDtdRA0fd3JRgkZ/Hc71ryF1Y=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:05:e4:fa:75:f6:b3:5b:b5:88:35:92:97:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Oct 20 10:01:24 2025 GMT
Not After : Oct 21 10:01:24 2025 GMT
Subject: CN=dceda767dc2e4a8a767298b88b677c6faac67c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:d1:9c:ca:30:1f:67:96:0c:cf:9e:fe:1c:
7d:c8:ee:8a:17:45:6f:04:dd:a1:66:1e:26:5d:1f:
95:1d:91:bb:0e:6a:3c:4a:19:f2:81:cf:53:43:9f:
04:12:f1:3c:8c:6f:1b:c6:c3:98:a3:b2:59:45:31:
f3:37:80:e7:57:cd:00:dc:67:b0:a1:d7:70:18:bb:
2a:27:00:9d:78:b1:7b:8a:7d:da:f8:f9:ff:44:21:
38:6b:8d:ec:f1:58:8e:12:2f:80:64:65:f8:10:6b:
4e:7a:b2:8c:f9:fa:db:7c:eb:68:f8:1f:f0:cc:53:
bf:69:6b:4c:58:63:37:6b:99:34:d3:25:11:88:55:
fd:9a:d8:2d:c5:6c:15:6e:30:0d:4c:bb:c3:da:f1:
96:4a:74:02:99:cc:5f:1f:99:a5:7e:e0:20:0c:31:
f3:c7:eb:7e:6a:a4:30:69:0b:a2:5c:aa:5b:2d:15:
79:8c:ac:cc:68:d3:f7:90:a4:bf:a5:e2:fc:76:c8:
0b:7a:81:4b:a4:42:64:b8:26:f5:e1:3f:a3:78:4c:
f6:d5:65:b0:fb:c4:42:74:9e:16:57:16:75:08:8b:
a0:84:6f:6c:23:7b:7d:cb:f9:5a:85:5f:3a:6a:34:
0e:21:56:c3:f4:79:9d:2d:b1:83:a4:94:0b:a9:3d:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:A7:67:DC:2E:4A:8A:76:72:98:B8:8B:67:7C:6F:AA:C6:7C:82
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a2:52:9d:18:ef:a3:a0:ab:92:63:c6:4b:dc:f2:d1:68:be:
8e:26:c5:1d:cb:d5:38:85:51:5f:a5:5e:24:e4:95:44:10:65:
86:1b:94:14:99:52:9c:35:70:e7:f7:9b:fc:4c:d3:5a:b4:f3:
57:d0:7f:ce:a4:b1:fe:04:2a:40:d1:68:3d:40:f1:4f:4f:b0:
d1:fe:f5:67:ee:5c:fd:18:89:a5:f8:2d:6d:1c:a3:9d:f8:49:
57:b8:d2:53:e1:00:86:3c:34:6e:e6:2c:01:34:27:cd:cc:95:
8e:14:5f:fe:42:ae:4e:98:b5:36:ec:1f:36:c8:c5:cb:e9:32:
f6:75:76:05:9a:45:01:35:bb:69:1e:74:96:c4:fe:01:a0:f9:
72:5e:1a:6e:bf:36:fa:f9:89:d1:dc:ff:84:38:5d:fd:bb:c4:
d8:23:05:4c:fb:9e:d4:aa:49:47:f5:bd:41:13:c6:ff:23:64:
ca:f5:cf:d3:15:28:74:74:17:9b:f0:7d:b6:9e:e0:60:65:9c:
64:a9:07:57:0c:50:21:13:b3:e1:5f:68:9f:73:e4:a2:0c:2d:
70:f8:8e:c8:93:4e:b3:a6:78:b9:a2:65:16:cb:32:ba:d6:7c:
45:d4:e8:0b:98:20:c0:26:43:7b:86:09:ae:22:a7:03:8c:e7:
28:f6:01:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:23 2025 by rpki-client