Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: FD5w2GvtQ8u/7pnIW/InOlAMnJGuf7RHFiVv6Uiytac=
Subject key identifier: C6:C7:37:18:5A:6A:20:5C:F0:D6:DF:E9:F0:67:65:44:0A:80:3B:40
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 0198D6CD4807B2C58978B5EF55F853CF6312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: LVAs9/P4fa+nHHHSJbYT44at6RIp2lhi6ZxzYHEUOPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:48:07:b2:c5:89:78:b5:ef:55:f8:53:cf:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=c6c737185a6a205cf0d6dfe9f06765440a803b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:24:b4:ea:90:27:ae:10:29:b9:c0:f3:48:
9d:42:6d:c1:a5:27:fe:82:c6:24:65:98:12:3b:ff:
a1:87:be:b7:22:29:ce:c5:1e:0b:c3:38:3d:67:46:
9e:34:3f:16:bf:4e:2f:0e:b3:3c:4d:27:4a:93:41:
c2:f4:cc:38:2e:e2:f4:8f:df:09:35:5e:12:b9:be:
b4:dd:32:d6:c5:7c:ab:b1:97:77:7f:9a:8d:5d:e2:
2e:74:43:b1:e9:9e:d6:e6:c1:77:cc:a9:1e:3a:a3:
d1:94:25:2b:b7:2d:ba:de:5e:33:f6:15:03:27:83:
21:e3:a3:ce:23:92:46:7c:54:61:b2:e6:10:b4:c4:
f6:c8:ca:0d:25:2b:8e:0e:88:ec:25:8a:e3:49:06:
65:ba:0f:af:c5:6d:eb:31:de:2c:67:12:15:c3:14:
7b:4b:d0:11:f0:79:58:43:b0:bb:ed:32:5b:79:eb:
fe:e1:6e:b3:96:f4:89:64:ad:c6:f6:71:ea:23:08:
5e:cf:e3:bb:92:16:ec:c9:ec:83:92:81:08:47:05:
c8:67:8c:33:4e:24:5a:63:a0:dd:2f:d8:cd:9e:c0:
f7:ae:b0:fd:1d:c0:4e:4e:7a:ff:08:08:88:e3:70:
de:0d:ef:e7:f0:8c:8a:e0:41:82:cf:0b:06:f0:bf:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:37:18:5A:6A:20:5C:F0:D6:DF:E9:F0:67:65:44:0A:80:3B:40
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:87:96:b9:0d:8b:37:fa:8d:42:9a:cc:84:54:0d:70:87:
e5:43:6d:06:8e:b9:44:d1:10:dd:a1:d8:66:e7:8a:90:7f:af:
d2:60:aa:35:91:da:5e:5b:a0:db:0e:6c:21:34:4f:dd:25:9a:
20:62:28:4c:16:60:d9:44:c3:22:ab:f4:b1:70:6c:4f:93:63:
55:56:f2:67:9b:a8:75:ea:3f:e8:cc:3e:4d:37:35:78:ed:85:
f8:7c:1c:12:de:c3:d1:1f:ed:2b:8b:87:3e:21:23:e2:b1:62:
12:40:63:07:21:b8:cc:bd:dd:5f:4b:ca:93:62:c2:95:43:e4:
19:9b:9e:8f:20:16:90:aa:b8:9e:de:44:0e:e9:fc:35:dd:6e:
35:a1:03:79:b0:da:1d:c5:b2:b2:b8:a8:76:a4:13:5e:62:d5:
9d:39:9a:18:96:81:fc:43:7e:a8:39:c5:e7:fb:24:66:f2:37:
21:82:19:19:a5:ab:87:fe:6c:79:3f:bf:4a:35:68:3b:c7:da:
29:0a:2b:97:e3:f0:87:65:44:7e:26:b5:73:ac:ea:6d:56:a2:
fb:a0:e5:28:5a:35:b5:25:d5:c2:77:bc:cf:6e:fd:80:07:c6:
06:83:7c:65:6b:d2:33:b1:ca:54:c6:d8:7f:6f:0d:23:5b:1a:
36:d7:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:55 2025 by rpki-client