Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: ZTrkqr7MtrgQ7PiToj2RWkoVU/QomNLNWgK8sbydRak=
Subject key identifier: 3B:24:EF:04:92:4E:82:8A:15:75:09:F0:D5:AF:A4:0C:AB:9E:3E:59
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 0199FD348C0B662E5E69EA5AA4998B00E666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 116E
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: hLj3lQIpViUlENlZe3FrdqjcFaFbWIChxG8zicD20pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:0b:66:2e:5e:69:ea:5a:a4:99:8b:00:e6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=3b24ef04924e828a157509f0d5afa40cab9e3e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:9c:52:e3:81:98:81:1e:ad:1a:61:49:b5:
5b:b9:cd:24:e4:63:b9:a7:bc:6c:41:3f:cd:17:9f:
c2:63:77:20:4b:04:70:68:3a:9a:71:90:1b:ce:5b:
ea:04:0d:08:f2:dc:03:57:97:0f:71:55:fd:cb:94:
e4:ec:56:06:06:98:36:98:8e:c2:8e:3e:55:d6:71:
f8:84:12:e3:d9:ad:4a:36:c6:ed:e8:58:d7:46:17:
8d:b0:16:c5:71:18:7c:1d:ed:40:cd:7c:9a:87:cd:
cb:f7:af:48:67:08:85:4a:c6:b4:bd:4b:71:82:02:
ae:e9:e1:c8:c9:d8:da:4b:57:7a:24:97:e6:24:12:
e5:5e:ab:c3:39:9e:8c:07:44:9f:71:43:44:6b:9f:
03:6b:45:24:cd:07:81:94:ed:69:c6:35:0c:27:ce:
6f:ff:6d:71:d2:cc:2a:bd:eb:2e:a1:51:9d:ff:13:
fa:76:6f:36:ae:b0:e9:56:a3:df:05:3b:29:68:2a:
8c:70:0f:cf:c5:ab:b8:e2:4c:1c:38:fc:89:e9:ab:
56:70:39:db:55:4c:1e:e9:2e:82:51:87:04:7d:a4:
2f:f3:53:2d:9c:7c:64:c5:fc:06:54:9c:b9:1f:e0:
2d:9a:92:4c:bb:6d:97:13:3d:c1:7d:65:01:9d:76:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:EF:04:92:4E:82:8A:15:75:09:F0:D5:AF:A4:0C:AB:9E:3E:59
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ab:3d:26:60:64:1f:b8:d6:c3:4b:37:aa:34:44:a6:59:03:
37:b5:53:88:61:05:a4:15:b6:00:ef:1c:25:3a:8e:58:c0:e7:
80:99:5a:88:33:fa:2a:7c:f6:f2:d1:85:0c:52:3c:2e:f5:e3:
b3:12:06:96:cf:ff:5b:33:99:e5:11:1e:a6:53:5d:97:f8:c8:
4d:3d:78:d0:47:84:22:a8:aa:46:20:f8:79:f8:53:02:a3:fe:
54:01:88:f0:0c:cb:c7:d9:37:b2:f9:31:9d:54:52:c4:ce:ea:
a7:2e:88:bb:d5:85:69:aa:80:4b:dc:89:a5:d5:f9:9b:c7:a3:
b7:81:dc:d4:8e:76:06:f1:50:84:b2:84:e2:71:55:f8:58:d5:
fa:fb:b5:92:84:5c:3e:f7:85:c0:6a:3c:c7:98:da:16:67:e3:
94:1d:8d:1c:90:50:4e:a1:1f:d0:8e:9b:cd:28:ca:c5:8d:b1:
f9:74:19:06:97:18:8b:91:66:9b:2c:53:c0:86:8a:94:d1:46:
c6:98:db:8a:39:ff:26:67:b3:0c:91:1b:63:f9:68:44:22:ee:
cc:83:78:07:6d:2b:b6:cd:6c:fb:64:c2:f7:c4:12:13:60:5a:
7e:94:a6:55:8c:bc:e9:01:d4:bc:32:0b:e8:96:fa:35:c6:96:
f0:98:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:37 2025 by rpki-client