Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: ZeSGZsk5kPxtjDdaM9exOLP8HPZJkJkcYGun24jIemM=
Subject key identifier: FC:D0:6D:90:A0:3F:FD:BD:20:0C:DF:8C:05:31:44:5D:14:9A:B9:C6
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 0199FC215D0909CC3528CA86D76BCAFBF2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 47
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (hash: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=)
2: qXbxlLviK9DJSOPQYHU6ZWE-Sa4.roa (hash: QbsyxqNuQBIITsu3wvPWziWsrz31D70A9kksDR3tVno=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: pw1ZpbMHjnXaXo/anAn+QJn2ze3wK3Ml084X4EcxRws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5d:09:09:cc:35:28:ca:86:d7:6b:ca:fb:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=fcd06d90a03ffdbd200cdf8c0531445d149ab9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:64:c8:77:cf:d1:bd:38:51:e0:9e:5c:de:
80:86:80:40:13:ae:f8:ca:a5:d1:bf:a6:00:7b:76:
cd:b6:bd:5d:db:1b:bd:67:f9:d7:24:3b:9e:75:d5:
32:62:87:46:61:05:17:07:93:59:ef:88:16:64:5e:
9a:c9:36:39:de:a1:f9:f5:05:01:1d:91:12:0c:89:
ef:e9:8e:d3:cc:b7:29:7d:4b:70:65:d9:77:34:d2:
26:e2:67:35:52:4b:ac:d1:50:34:36:d7:bc:ce:a4:
b6:b7:08:61:ae:ca:3f:a2:96:0f:da:10:94:ed:a8:
44:ba:cb:47:15:e4:af:cb:84:a8:e9:8a:2d:ca:bb:
3d:af:70:6c:ca:2a:b8:76:bf:6c:f1:60:71:70:77:
e9:64:ec:05:dc:5d:ad:a7:04:80:c9:1b:2a:33:62:
06:e8:13:ff:85:4b:80:a1:e4:0d:d4:5a:63:18:71:
54:2f:3f:cb:48:10:5e:be:37:f5:ec:68:b9:3b:b5:
1e:28:36:61:6e:bd:bb:19:0f:c7:2d:97:05:16:83:
c8:72:e9:fa:d0:23:64:4d:eb:a6:e9:fe:b4:47:ea:
33:cd:7e:4a:96:84:19:fa:73:57:ba:b9:1f:54:b2:
2e:89:aa:03:64:d3:b7:1d:84:1a:03:d3:35:36:c1:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:6D:90:A0:3F:FD:BD:20:0C:DF:8C:05:31:44:5D:14:9A:B9:C6
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:ed:4e:cb:e9:cc:6d:75:f4:26:6f:1f:df:7c:13:f5:9a:
b4:d1:6c:c4:4d:1e:0e:9c:06:53:5c:d8:c6:5a:75:e3:e4:da:
7c:7a:10:19:a5:6f:bc:0c:b4:9c:57:56:e0:53:bc:49:e9:9e:
54:1f:d2:23:d6:c6:e0:1f:52:33:2e:3f:db:62:fe:8a:64:71:
2a:2c:e2:f2:56:26:5e:7f:69:46:39:72:cb:42:35:3a:24:03:
d1:9e:35:16:42:02:21:22:1c:cf:1b:d1:34:bc:17:de:2e:fb:
e7:ee:64:dd:d5:46:b9:a7:a9:65:0e:09:e0:63:8a:93:fc:ae:
69:bd:c6:8f:45:d5:78:ae:66:9c:e4:bc:3e:56:85:a4:37:37:
be:5c:6b:8b:cf:b1:57:f1:d3:eb:16:84:1f:de:66:ec:a1:53:
d8:63:0b:ee:58:54:53:21:0b:38:a4:f0:5a:3f:81:f2:77:bb:
eb:93:f1:0f:bf:ec:ae:de:0b:87:df:ea:74:f8:6f:eb:82:a4:
8b:d2:84:79:92:91:4f:f5:67:05:74:6b:b8:8f:86:25:07:02:
95:4a:b3:2a:1a:35:00:88:4f:f2:b1:b7:e3:56:43:c6:1d:fd:
6f:f2:67:b7:6b:f9:84:2c:9d:f5:1a:67:33:7d:a2:42:67:8e:
31:40:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:00 2025 by rpki-client