Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: TxgQI5YHzvSugEl/nBsYftkciLJe5maWKdxyD+lAjK0=
Subject key identifier: F9:04:0C:AF:C2:E6:00:A6:55:A0:5A:0C:C1:D7:8D:B9:3C:34:D8:0D
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 0199FB7C7E0DA764B84809109D21B09CFB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 4D
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: seLPmVXLd2W89fqDqxzJFb/vvKv3ekPIrLlwUnk71Gs=)
2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7e:0d:a7:64:b8:48:09:10:9d:21:b0:9c:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=f9040cafc2e600a655a05a0cc1d78db93c34d80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:29:9c:e0:dc:15:d8:4b:18:eb:4d:07:e8:
ee:fa:c2:51:89:4a:7e:e8:a2:18:8d:be:1d:16:b6:
e0:95:81:ce:b1:86:7d:33:62:7d:32:d0:9b:39:10:
8f:55:6d:6a:71:93:b5:e7:78:62:14:3f:81:4f:26:
de:08:7a:7e:9b:82:0c:67:01:24:e4:25:41:5c:ce:
5e:8d:29:8c:1f:e0:5e:f9:a5:86:90:0e:a8:54:0b:
8b:54:5b:3b:a7:53:5d:a5:85:80:85:26:eb:85:a4:
39:bb:c5:1a:4b:22:d1:c3:42:ee:de:aa:e8:4d:98:
b2:49:c1:55:8c:76:84:fd:c9:84:87:8a:4d:93:3f:
e7:15:56:f9:3f:d0:5b:65:e5:eb:1a:4c:8c:0d:ab:
a9:41:fe:72:e8:f9:0a:c6:65:13:6c:0c:bc:dc:52:
cc:ac:07:86:32:f3:a7:b7:44:16:07:a7:2d:59:b9:
d7:87:17:2f:84:88:8a:08:0d:a5:bb:24:17:09:09:
79:06:ba:7d:85:6d:a2:16:20:0b:c2:21:cb:1f:19:
61:48:23:48:89:69:94:35:bd:52:95:4c:e9:53:29:
ba:8e:dc:84:76:24:7b:38:1e:df:52:12:39:42:b4:
53:e4:24:15:02:2d:36:84:68:41:fb:4b:2b:e1:5a:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:0C:AF:C2:E6:00:A6:55:A0:5A:0C:C1:D7:8D:B9:3C:34:D8:0D
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:65:62:89:e5:70:c7:86:78:83:7d:a9:4b:b4:00:4f:c6:95:
00:11:e1:b5:3f:64:06:75:70:b1:18:26:81:c7:6a:9b:b0:6f:
47:8b:65:53:60:d3:32:ce:d9:80:06:95:15:53:4a:3d:c1:de:
6c:a6:93:e7:11:4f:b4:c5:84:74:16:73:48:e5:48:33:88:a1:
86:b7:e1:5f:04:76:be:ed:c6:5f:49:80:59:db:de:e6:23:cd:
f7:21:d3:01:78:a3:5b:c4:66:f9:72:b0:80:d1:40:1b:1e:37:
f8:c7:52:05:5e:c7:47:fc:89:68:bd:95:24:ab:90:2d:2f:a4:
2e:5e:40:3b:30:f0:cf:a9:70:55:97:34:5f:56:c1:9e:01:20:
34:0a:37:05:7d:7d:3a:cf:bc:b0:3f:54:81:7f:64:79:74:74:
e0:c4:0d:d0:ba:3e:d2:02:20:a6:d9:db:a8:7a:68:48:0b:05:
47:1e:b7:15:6b:95:85:50:41:0d:07:f4:53:74:87:0b:ea:e7:
72:ef:e9:9b:6d:7f:b0:f9:39:6f:79:e3:94:fa:ac:41:30:9b:
85:42:79:0f:f9:28:74:40:ce:be:69:cc:3e:3a:c5:21:d5:53:
af:9b:3a:63:f2:4e:af:3b:06:40:bb:89:bc:92:d0:ba:43:38:
71:ab:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:23 2025 by rpki-client