Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: 0kpnwevMbJ2PlhXYafrIBmU2hNNGifXP5oOIXlnl2DE=
Subject key identifier: 6A:C3:85:CA:16:C2:61:63:B5:E9:EC:FF:49:4B:B1:EA:DC:B9:F8:22
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0198D4E01F0EBC402CF0AD259E86C5C40280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 10FE
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: o8qomar+mCKy14TI/uBTgroWP2HcdHXOSUb1uOlZ8Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1f:0e:bc:40:2c:f0:ad:25:9e:86:c5:c4:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=6ac385ca16c26163b5e9ecff494bb1eadcb9f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:65:4c:37:0d:c0:24:69:b4:5f:a8:23:b7:
1e:00:84:8d:53:32:43:8d:4e:ec:53:a7:30:f3:fa:
ed:f9:dc:77:01:ac:a5:c1:f3:46:19:bf:15:22:a3:
eb:78:fd:f9:b1:d2:b8:dd:22:cb:67:08:dc:63:29:
b1:df:79:2e:96:7b:ba:0c:b4:61:ca:9c:a4:f6:82:
4e:88:c8:06:3e:4b:e4:be:47:15:e7:1f:d8:e0:8d:
de:7f:5a:94:d7:2b:6a:84:24:59:cf:b0:dd:24:33:
29:0d:9e:2f:c5:44:6a:dc:dd:19:d2:04:1b:06:92:
90:3b:20:cc:b6:f9:05:ce:8b:02:1a:51:17:58:cd:
35:05:01:48:8c:59:6d:2e:ea:53:85:c9:fd:85:09:
3a:0c:c9:d7:a5:12:c9:f1:7a:5e:b5:de:41:ad:6f:
f1:05:f4:81:95:83:b8:fd:c4:03:c5:4c:82:53:f2:
a1:c2:e9:c0:5d:74:50:8a:3b:b2:52:c8:a6:6b:ce:
7a:7f:2e:10:7f:3a:88:aa:be:51:b3:e2:a9:3d:42:
18:ed:c2:16:b1:34:bb:d3:dd:b4:f2:c5:3e:c4:b1:
23:5f:eb:d4:dc:8c:7c:f0:30:d5:25:f3:c8:fe:20:
d4:8b:04:30:35:23:f8:be:52:c0:00:23:d6:d5:bd:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:85:CA:16:C2:61:63:B5:E9:EC:FF:49:4B:B1:EA:DC:B9:F8:22
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:05:df:a1:09:87:94:ac:f7:e4:18:ec:2f:87:e9:14:97:
7c:d5:09:4e:1a:fc:5a:ba:2a:73:d2:41:64:c3:ca:fc:13:81:
14:fe:d4:d9:7f:f1:c5:ee:69:89:fa:5b:c4:b3:f7:01:79:95:
49:0d:dd:1e:e8:f4:1b:b2:d0:a8:4f:8a:75:cb:1f:0b:40:ee:
cf:83:43:ed:40:6a:6a:1c:d1:a6:34:34:70:5f:d3:50:88:b8:
4d:d1:7a:f5:d4:c6:d6:03:bc:95:b1:3c:6b:1f:e6:95:aa:25:
d8:e8:04:10:37:cd:47:10:5e:45:96:7a:ce:4d:1d:40:f5:df:
ee:53:95:22:d4:9c:59:8a:58:15:52:5f:ed:0c:79:c4:d0:8d:
1a:2c:69:2d:46:71:47:4a:44:dd:89:d7:13:0f:b7:f4:2f:bf:
39:d2:fb:64:9a:d9:09:e5:b2:47:11:2f:2f:d0:e8:67:a0:05:
20:ac:eb:d5:14:b5:0e:77:c5:33:78:ff:bc:30:3e:e6:a2:95:
f9:4c:19:bd:8c:10:a6:90:98:28:20:db:df:f1:6d:6b:fc:9d:
6c:fa:72:0e:5f:51:0a:f7:14:65:ed:c1:77:39:cc:67:3a:fc:
93:33:76:df:9c:e8:1f:2d:7c:eb:6c:64:d0:58:8b:94:bc:d8:
cf:ae:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:39 2025 by rpki-client