Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: SmjMoITrGNwBtqjwpU2CQVPJ+ULIkWIadimCbKTNwRM=
Subject key identifier: F2:68:1D:F7:A0:65:93:CD:B2:B5:52:02:A9:F0:4B:50:9D:0F:2D:E9
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 0199FCC6982C21A8E489536DFBA943227347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 0105
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (hash: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: eriP4wri0hYbeu2tN3TGGo3yfsLsxHMl2aJULdwIV1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:98:2c:21:a8:e4:89:53:6d:fb:a9:43:22:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=f2681df7a06593cdb2b55202a9f04b509d0f2de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:84:39:d2:ac:3c:9b:d6:18:84:71:2e:f6:
3e:fe:7b:bf:3b:d3:97:f3:6e:fb:2b:55:c2:65:f3:
78:ee:a6:b3:f3:42:4f:8b:d6:79:49:fc:15:94:a6:
46:09:34:93:f8:2a:18:c3:38:89:50:ea:6d:97:cd:
97:29:1d:eb:19:42:bf:f4:18:6b:f6:ac:3a:d6:64:
a3:16:88:b3:58:02:1a:64:3e:1a:69:b3:1a:a7:ed:
06:15:6a:df:70:b3:fc:ea:38:56:45:3c:f5:06:b8:
e0:78:40:42:ac:8e:ef:c7:0b:5c:19:1f:ad:43:9d:
9e:eb:20:bc:b1:25:e9:ec:0c:1a:fe:be:a9:6d:06:
5b:a0:0a:d0:bf:6c:c9:7c:ad:b3:27:33:f7:10:0a:
a8:3f:c2:b0:3b:19:f7:f8:62:48:92:66:d0:84:af:
88:ca:4d:cc:f8:57:80:8a:bd:c7:36:93:cb:98:0e:
0a:25:0d:8c:de:ec:36:a8:6e:71:b3:e4:6e:56:7e:
4b:f6:61:93:6e:d6:22:44:03:9a:96:77:47:de:fa:
99:63:3b:fd:40:78:b9:82:47:40:15:e3:76:39:73:
9a:97:9a:54:7a:d6:b3:98:1c:61:a0:28:42:0e:3c:
80:a9:b0:6e:78:a2:67:3a:40:72:9d:8b:8c:9b:1e:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:68:1D:F7:A0:65:93:CD:B2:B5:52:02:A9:F0:4B:50:9D:0F:2D:E9
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:b9:ad:b4:c0:00:6f:47:11:ed:e3:63:54:84:1b:db:f8:
a9:27:3f:71:f7:bc:11:74:2a:77:21:49:ab:df:eb:e8:f1:b0:
11:ee:95:41:89:12:94:6c:70:4b:e0:70:27:3c:3b:4a:2c:d5:
46:ca:3f:2e:98:3b:be:89:e3:1d:95:95:28:50:27:62:54:1a:
49:7b:91:5e:6c:46:d1:39:3a:94:76:56:18:11:b6:4c:78:87:
5a:43:82:ed:bd:73:3b:da:dd:b4:c5:70:db:0b:f2:db:0b:5a:
a0:21:55:04:1c:ff:ef:17:e7:a9:8a:bf:e2:f3:0f:ce:57:56:
01:c2:b8:95:ad:32:fe:60:4c:7e:e3:da:13:d0:83:3b:13:4a:
c4:82:df:75:73:5c:64:19:76:cb:e6:8b:1a:2d:70:06:7d:9e:
80:21:5e:03:86:3d:9b:f3:97:a2:85:2a:84:05:83:d2:ad:a9:
60:40:08:dc:08:7e:00:e2:cc:53:01:04:cb:6f:70:3b:7e:3c:
7d:e2:47:13:28:e1:54:08:26:7c:33:bc:89:ec:fa:b5:36:f6:
78:55:ae:51:36:9b:35:4d:4d:dd:cd:47:e1:cc:4e:10:8d:ab:
d6:25:1c:80:06:f2:71:8a:7a:9c:71:84:36:64:03:b6:c5:15:
e0:69:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:23 2025 by rpki-client