Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: dLps9n7M63Zju+e89qi47BT2o45yC+IaVX1wdzspTXI=
Subject key identifier: FF:14:49:DF:14:87:B7:0F:35:C4:64:E4:86:BC:37:53:FA:BB:4F:1C
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0199FDD9B5EE333A5D30BCC11A82DF0C077D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0963
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: uiNHavfGHhwsj3xfuodOMPIS/susEDKR+3osnxHms/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b5:ee:33:3a:5d:30:bc:c1:1a:82:df:0c:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=ff1449df1487b70f35c464e486bc3753fabb4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:34:35:96:42:35:86:d8:b7:2f:a7:6d:dd:
af:82:49:47:5e:b7:d8:ba:60:40:27:18:8c:38:19:
29:2b:23:2b:65:af:b0:4b:42:da:d5:67:26:0a:07:
b4:2c:27:db:82:5e:5e:14:65:26:f5:0b:dd:0d:96:
1f:13:27:58:8c:d6:f2:07:98:a4:66:53:e1:82:f4:
c9:bd:9c:68:17:23:26:82:6a:74:1d:ae:c3:bf:15:
0c:bc:0e:ba:37:1e:32:d2:d3:76:87:33:02:53:21:
93:36:64:87:09:5e:66:71:9b:0f:d7:b3:da:f6:74:
33:63:d3:49:2d:5d:eb:bf:c3:97:4a:db:b9:fe:6e:
26:d9:ed:ae:c9:3a:9e:79:0a:15:a1:97:12:ed:12:
24:27:f2:ea:c9:11:44:ad:9c:92:81:d3:b1:75:03:
2f:32:f1:d6:d8:33:be:21:00:01:d1:98:54:ea:05:
78:4b:be:66:91:b6:ee:02:97:9e:83:2b:79:0f:f7:
05:7e:5b:ae:72:61:85:07:4f:4b:5c:6c:a6:d6:54:
b1:34:12:4b:e4:65:f9:e8:6f:1b:7a:0f:f8:68:35:
2d:cc:bb:6d:7a:29:ca:35:fe:9d:5a:55:65:08:3c:
ec:ba:64:f8:06:66:b9:1d:3a:26:ed:84:b5:fc:63:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:49:DF:14:87:B7:0F:35:C4:64:E4:86:BC:37:53:FA:BB:4F:1C
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:92:e3:8a:35:f3:a1:7e:0f:a0:05:5a:32:99:02:94:a0:a4:
de:3d:31:80:ff:81:c1:9f:19:29:1a:4b:c7:fc:dd:8d:9e:ed:
02:d8:e9:7e:e7:1f:7e:70:34:ec:99:0e:65:48:79:64:20:a1:
67:70:6e:9d:30:e8:4e:83:b7:16:7a:e4:58:c2:8c:db:1c:4c:
6d:c3:2a:24:eb:94:6f:7a:7c:ec:c7:ba:b5:2a:38:c6:30:b3:
7d:3c:19:ef:91:9e:f6:53:f6:30:eb:98:95:2f:3d:c5:16:8b:
8d:b6:94:f5:27:02:cd:f5:7a:29:0a:86:03:ca:96:4f:fa:90:
86:da:32:d0:ff:53:5f:10:8c:e8:7a:ec:1d:60:22:9b:c8:5b:
1c:8c:0e:d8:a8:b9:7f:74:2d:37:21:1e:ac:91:2f:ba:3c:d1:
2d:db:20:36:05:92:3e:d8:03:f3:02:ce:2e:69:8e:88:f9:b5:
55:38:a6:10:37:b0:45:a0:cd:71:a0:11:9e:0e:33:3d:ec:46:
ff:bb:83:75:67:1c:0e:1e:17:35:9a:97:4a:99:ad:08:31:d7:
d0:e8:a3:c4:99:ab:23:3c:eb:6b:ff:29:81:ea:6f:21:25:ec:
1b:c1:a2:c6:21:da:33:d6:ae:e9:05:a4:4b:6a:38:b6:fd:0e:
70:85:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:34 2025 by rpki-client