Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: XCRg2WK1UwhxHkrb5uVIXnTzrrsT0ExS1TQttL/mVbU=
Subject key identifier: 84:2B:CA:B2:EB:E4:F5:FD:21:F7:45:B0:07:46:D1:8E:AF:57:E4:D5
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 0199FC8F7E475240448CD24EC793D1F005D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 01B8
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: RORGw2t5DTMeXGeJ61pe2/XoulH7UMEOMMxU3LCvlEQ=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:47:52:40:44:8c:d2:4e:c7:93:d1:f0:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=842bcab2ebe4f5fd21f745b00746d18eaf57e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:35:ff:32:0c:0f:0f:58:68:a5:d5:a3:27:
8c:cf:72:ae:fb:5a:eb:0b:35:01:e2:8c:59:fc:eb:
fb:b1:aa:4f:2c:a1:9f:3c:c4:9d:ca:17:92:5a:74:
d4:bb:90:36:93:7b:a2:90:9e:4c:aa:45:42:48:39:
a7:0f:1d:bb:7b:c8:c6:29:1a:b3:fd:3d:a7:42:cc:
1c:5d:ac:93:b0:0f:9b:bb:1e:84:e5:8e:32:ba:db:
18:48:db:2b:d4:59:d4:a3:48:57:ad:2d:0e:59:26:
f3:0c:81:29:ce:ba:28:c3:d9:b5:d0:72:09:1f:23:
23:51:c9:a2:ea:4c:69:bf:78:8d:e5:7f:b2:f6:98:
10:fd:8c:1f:54:e4:84:3f:d1:a9:f0:bb:45:aa:3d:
af:9b:ff:b0:1f:a4:58:45:04:d0:95:eb:b8:9d:86:
33:38:03:f0:18:53:e4:a0:77:04:7c:a9:ad:f3:32:
52:41:82:e4:08:47:e8:32:cd:f9:96:58:e8:48:71:
8c:86:9e:15:3c:b1:1a:0c:75:57:28:ab:c5:40:3f:
8e:40:07:d0:14:3e:03:48:7e:d3:c6:30:56:ff:49:
aa:cb:d1:e6:d8:ac:31:d7:07:69:a7:8b:70:1b:90:
dd:5d:00:3e:ce:7e:a6:7b:96:54:ed:77:3f:bb:3f:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:CA:B2:EB:E4:F5:FD:21:F7:45:B0:07:46:D1:8E:AF:57:E4:D5
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:33:fe:86:a9:a5:1d:4e:a4:46:3c:1d:10:4e:90:f6:05:3e:
f6:00:f6:24:d3:6e:af:d0:83:e7:22:4a:20:d1:e0:5b:c3:63:
c9:2b:e1:6c:a7:35:cf:e5:c2:ec:26:60:aa:4d:c6:ce:4f:f9:
84:07:e4:33:ed:8d:f2:74:e9:c9:e8:d6:a3:07:14:f6:76:e9:
a3:90:38:11:3b:c1:a1:85:87:fd:46:c4:40:49:f5:cd:41:b9:
ed:82:b2:ba:00:c2:a0:fd:ea:83:f0:cc:06:d4:b4:ab:d4:6e:
56:07:2b:97:a0:7a:37:87:e5:8f:c4:71:88:8b:5e:b7:9a:ab:
63:ae:15:a8:af:a9:42:1c:c0:bc:e9:ee:24:fb:b1:cb:f4:a8:
0b:01:0d:4f:bb:14:73:72:a0:cf:ed:5a:e5:f3:f9:c1:08:73:
da:bb:b2:8c:6e:a6:85:d1:bf:16:7d:aa:5b:cf:86:7d:e1:05:
c5:9c:ab:91:a8:f5:67:a9:16:78:c1:59:09:89:8c:49:5a:62:
47:da:fa:07:ca:72:e1:9e:2e:79:86:5d:65:e6:12:be:09:f3:
6c:88:ba:26:e3:a7:b2:c6:8a:ac:70:57:10:3e:58:75:1a:02:
61:13:c7:d7:e7:52:f5:b6:0a:79:87:c3:9c:dd:12:89:a0:49:
3d:c5:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:12 2025 by rpki-client