Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: gZ0kMIingvGIK8WCW9akf6OFAjpzt3gHzXe5HzYNtZc=
Subject key identifier: E9:F2:C0:D6:0D:F5:56:25:D4:11:9A:0C:64:69:40:DD:6A:55:DC:35
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 0199FBEAF5C54D462647C22307461795D5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0F4D
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: eVRnnHyYwwCBzZiOlx1+U/OSyveY7Yl6xryYit0yx3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f5:c5:4d:46:26:47:c2:23:07:46:17:95:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=e9f2c0d60df55625d4119a0c646940dd6a55dc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:f4:8a:e3:ef:cf:4d:d3:f3:30:5b:39:81:
b9:0f:a6:0f:aa:d5:83:11:56:4d:ec:93:61:5b:3e:
29:2d:64:95:69:1e:2e:00:68:8e:70:dd:00:a2:30:
de:aa:41:a4:0c:a7:a0:07:32:e3:c6:56:4f:2a:ec:
a3:9c:3a:b6:60:17:d0:3f:aa:5b:d6:cb:8b:3a:3a:
cc:44:15:f7:d8:02:87:21:d1:49:a5:f2:7d:cf:ac:
cb:a7:b5:45:47:c6:3b:35:59:bc:4d:cf:64:ff:b5:
3f:95:d7:f6:3c:33:32:89:ad:dc:f6:d7:a4:fd:26:
2c:d0:8b:c1:74:2d:9e:89:38:57:af:e8:d5:05:75:
5b:4e:e9:51:a9:dd:6f:45:91:40:a2:ee:cb:ad:b1:
1c:32:08:fe:dd:c2:ac:ed:f9:d9:43:db:70:ff:c2:
b1:89:f7:d2:87:08:d9:1c:be:5d:ed:c6:23:92:59:
89:81:2a:91:3d:f4:4a:21:7b:c8:32:97:1d:22:0f:
f3:83:ce:d2:d0:4d:b1:79:4c:be:f8:e4:2d:c0:45:
20:d6:df:c6:e5:07:25:c8:6e:f5:b1:73:8e:11:85:
72:1e:a1:c5:ce:33:f9:cf:f1:19:ea:a1:00:c4:a7:
3d:9e:53:d8:85:cc:96:57:a2:91:76:b9:06:bc:43:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:C0:D6:0D:F5:56:25:D4:11:9A:0C:64:69:40:DD:6A:55:DC:35
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4e:8d:24:03:c3:94:ae:67:35:63:b7:8b:fa:32:85:cc:09:
47:3d:56:2e:e1:cc:0e:9a:3f:a1:72:22:77:4a:43:25:3b:13:
f4:76:12:00:bc:a4:c3:eb:c8:b9:24:07:c5:37:69:e0:1b:3a:
e9:88:cc:4f:a7:34:ac:e4:50:96:86:94:71:22:8c:65:2e:d7:
ce:eb:1f:5e:3e:66:54:ba:1a:e4:25:6a:09:7e:4d:1f:ff:0f:
2b:62:66:c3:e5:a1:d2:d9:5f:78:f0:85:d9:c3:c0:6b:0e:e6:
7d:63:2c:43:81:8a:c7:b8:3f:15:d3:8a:a3:ea:1c:cc:70:61:
77:05:4e:de:f4:11:c1:42:bd:e7:a6:fe:27:12:e2:f3:2b:78:
83:c6:56:c7:5a:b1:f3:9f:3c:03:b3:d7:e0:d3:8c:35:61:f0:
94:9b:e0:46:25:3c:b9:e2:83:45:d1:fc:f8:1e:8c:37:5a:0b:
03:1a:44:52:6d:c3:21:3e:01:b8:83:a0:35:93:8e:1f:d5:3c:
96:32:a6:2b:a6:82:77:bd:48:35:a6:38:81:07:65:b5:b4:90:
0c:1b:96:eb:0b:6f:d0:58:eb:cb:d1:0d:31:e4:95:6e:45:74:
24:ad:9e:b4:20:59:3f:bc:59:17:67:9a:73:53:38:48:b0:0b:
a1:1c:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:55 2025 by rpki-client