Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: 1dQ0YIE2nL1Gq4saRrf7aUrkrWEDetqY6EFVFim42Qs=
Subject key identifier: B0:35:B9:82:FC:FC:95:9D:EE:95:EB:07:29:17:FA:17:6B:EA:CE:F3
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0198D54E5AFBE89B6ADA4225616722D221FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1189
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: bPIdtEb3pUFkR7QC2/T+TfwlQ0ckUXU1LqG2wCpLXWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5a:fb:e8:9b:6a:da:42:25:61:67:22:d2:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=b035b982fcfc959dee95eb072917fa176beacef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:e0:d3:3d:73:bc:97:50:6b:c8:06:6e:95:
ee:c6:52:74:6b:43:f0:00:66:90:76:84:ce:33:85:
ee:1b:7e:6a:18:c7:56:48:05:3a:cb:5e:a7:68:92:
19:fa:58:1c:f7:ad:7f:a0:3c:8b:2f:1b:50:04:e2:
bf:87:a6:ba:34:1c:53:8d:0e:d0:5b:4a:34:cd:4c:
39:11:93:58:13:fd:b0:f7:0f:17:91:af:8d:e5:bc:
cd:0c:86:fd:a9:1a:58:c3:d0:de:c4:ae:22:ee:87:
5a:1e:94:dc:09:d7:df:f8:0b:c3:4e:ab:76:5e:22:
db:57:ce:83:c2:d8:1a:4e:b9:9c:fd:3e:9c:8c:dc:
c4:4a:a9:32:ed:a8:fb:f2:66:52:4a:e5:80:dc:13:
ce:93:96:9b:4e:6d:8c:5b:87:83:3c:64:1d:a6:6d:
9d:54:3f:6b:b0:e4:9f:b2:ac:81:68:8b:f2:11:cf:
64:6e:14:2e:af:9b:00:e6:7e:47:2d:39:9b:78:e3:
f9:46:54:b4:a1:e5:c8:ff:e3:69:d7:8c:5b:e9:80:
03:2b:20:25:e2:b4:e1:d6:45:99:4f:f5:50:c4:4b:
d4:2e:99:a5:6e:c3:82:c8:82:df:db:d9:49:b4:83:
99:b1:d5:53:62:6c:be:fb:87:ee:e3:46:ad:86:df:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:B9:82:FC:FC:95:9D:EE:95:EB:07:29:17:FA:17:6B:EA:CE:F3
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ed:50:c2:a3:da:9c:3d:c0:96:0d:86:db:15:6a:82:ac:26:
3f:11:b3:54:96:1f:d3:39:fd:4f:78:08:ab:00:83:c4:71:03:
f6:a5:c1:f9:9f:f6:fe:bf:f0:b5:db:3f:12:ea:40:91:70:d2:
75:d0:7b:b2:35:cc:14:e5:0a:ce:fc:e3:14:91:0a:54:b8:65:
2c:3d:93:36:23:fb:a4:04:cb:90:25:55:ab:5a:6d:93:b5:76:
7e:f8:05:82:29:c7:89:a6:42:f6:0a:b3:88:7f:6b:9f:ec:f1:
97:fe:ae:17:3c:30:46:37:fd:91:95:96:11:aa:11:0d:09:c4:
22:d7:49:f1:b6:9d:6e:10:b7:65:d3:a4:9b:30:a5:85:41:59:
10:b3:66:5a:5f:fe:c5:d8:1f:f2:9c:aa:a1:f6:82:35:4d:57:
17:ec:87:e1:11:45:77:20:7e:8e:d5:12:02:62:35:a3:92:53:
8f:4b:10:d5:7f:b3:ae:fb:7b:c2:43:c7:2d:f5:1b:45:7f:55:
0f:20:8b:dc:97:fe:39:69:b2:c3:8d:9a:9f:c0:85:2a:5c:d5:
15:f3:13:82:88:ea:bb:21:7b:4a:4b:58:10:ed:33:2e:ee:bc:
51:a2:52:2f:b1:51:18:82:42:ef:76:56:f3:29:3c:ac:79:d3:
3b:f3:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:29 2025 by rpki-client