Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: 4wBv79W/u4d/NYmrQCFe0d/xox/rV6cR9mC5JTRTfQc=
Subject key identifier: DF:98:DB:A4:92:77:0D:84:F4:07:34:DF:4B:21:9F:1A:54:E4:BA:47
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0199FAD80AFA416690D2BE54728961515EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1221
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: Br6OHwwLPnypjme53Cx50q3FvuMTxlzw/ZmiPQ2AnQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0a:fa:41:66:90:d2:be:54:72:89:61:51:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=df98dba492770d84f40734df4b219f1a54e4ba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:c5:ca:e0:97:27:99:cf:79:da:59:65:9f:
46:f1:18:c5:8d:be:8f:9b:43:80:19:31:aa:6d:57:
59:16:f4:46:43:04:6f:48:7f:34:68:19:f0:f6:d9:
af:62:6e:40:92:91:62:e9:38:c2:c6:02:39:50:22:
b4:68:c3:9a:38:7b:ba:5b:e4:0c:01:1d:ab:ea:69:
46:dc:6b:56:b4:a8:21:1f:7e:1f:e3:0b:98:5e:91:
98:96:e4:7f:80:19:33:99:42:eb:56:15:c6:5d:18:
5a:f8:d7:0f:f3:71:d9:c9:da:ac:3e:cd:76:34:ae:
98:a0:cf:31:41:db:d3:fe:32:1b:aa:ba:d3:da:4c:
55:72:c7:4a:e4:d6:6b:2a:0b:d8:42:24:5b:4c:73:
a9:7a:6a:ce:8f:2b:c7:bf:72:37:20:30:2c:2b:9e:
3c:76:31:41:5f:1f:13:d5:71:89:81:cb:f1:be:53:
d1:10:19:a5:9a:5c:33:f1:ff:bd:56:74:90:d5:a8:
bb:90:df:29:58:ba:e5:3a:74:c5:66:8f:4c:fd:42:
10:81:e2:1a:2f:48:d8:cf:a1:6d:25:63:cc:5f:6a:
7b:a7:68:81:f5:71:33:13:ce:59:29:ac:3a:b6:2a:
64:e2:8f:21:a1:2e:1a:9a:da:40:3e:6c:c2:45:fe:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:DB:A4:92:77:0D:84:F4:07:34:DF:4B:21:9F:1A:54:E4:BA:47
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cb:ee:94:4e:8f:7f:05:2e:0b:0f:e5:11:3d:aa:fb:70:cf:
93:74:70:2b:36:43:e5:52:0a:c8:46:c8:d6:50:75:6e:2a:fa:
46:b8:44:28:17:76:69:75:9a:7e:ab:7f:a1:6b:bc:29:b2:2a:
a6:d9:5b:15:ac:4e:d1:e0:f7:eb:e7:c5:d1:3c:f4:c2:9b:e7:
02:60:40:c7:a8:53:da:65:3d:12:07:67:2d:2c:99:0a:b5:94:
1d:f2:ac:9d:94:48:6f:b7:1c:56:ad:da:11:ee:bf:70:ac:89:
e2:e8:f4:1f:58:d2:de:61:9c:87:b3:05:1f:98:5e:00:e4:2f:
49:f3:7e:65:05:51:ca:71:3f:57:b1:6e:f1:fa:83:96:c6:1c:
d1:ad:4b:36:ec:dd:0c:d0:8c:d8:53:bd:7d:59:31:a7:74:61:
3e:f3:6c:9d:ba:1f:09:0e:4b:5e:48:93:19:a4:9e:ff:97:08:
85:aa:c9:63:a7:c4:8d:35:19:67:5b:da:52:b4:3c:0e:c2:d2:
38:05:ef:a3:12:80:69:04:7a:5b:31:7e:d0:1a:f7:40:13:ef:
4d:84:a3:c9:fa:07:c5:0a:ed:f9:86:ee:0f:07:6f:61:16:29:
9a:8f:c0:b1:34:70:15:53:0f:10:f7:3e:b4:3a:f8:97:ac:03:
e4:c6:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:09 2025 by rpki-client