
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: jm4Fj2XJyTS60WcsVCzQwAqnbxi7z0nR4zGXwv3Lnw0=
Subject key identifier: 28:7D:5A:6D:6E:2B:19:CB:6D:5A:1F:1F:44:DB:41:12:67:F5:28:47
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 0199FEB4C375CDBAF74C358D5AF09785A230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 0EAC
Signing time: Sun 19 Oct 2025 23:01:23 +0000
Manifest this update: Sun 19 Oct 2025 23:01:23 +0000
Manifest next update: Mon 20 Oct 2025 23:01:23 +0000
Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: dM1Tbk/UINGpDfUa1a7d7r/OD2HekxYvNBsPH1WN8Uo=)
2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c3:75:cd:ba:f7:4c:35:8d:5a:f0:97:85:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Oct 19 23:01:23 2025 GMT
Not After : Oct 20 23:01:23 2025 GMT
Subject: CN=287d5a6d6e2b19cb6d5a1f1f44db411267f52847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:46:f0:55:0e:4e:9f:46:4e:8a:e1:fa:c1:
ec:f6:71:91:d8:d0:8a:ce:2b:64:5f:3d:bb:fb:7e:
ec:99:86:8b:33:81:92:46:79:e5:bf:6b:46:ce:6b:
d5:16:c4:50:0c:d6:27:75:b4:81:6c:aa:c2:ea:08:
d9:ce:35:f6:df:1f:4f:6c:87:42:86:74:4b:9f:5f:
7a:82:40:3b:0e:40:4f:50:31:c4:9c:50:ea:f6:b3:
62:d4:5d:a2:84:ac:f6:40:dc:0c:1f:fd:dd:29:53:
51:23:e3:62:02:1c:42:89:03:cd:de:7d:2b:64:42:
f6:03:53:68:79:5e:94:f7:52:c9:84:30:64:66:8e:
ac:a7:3d:82:90:ef:19:a0:5c:2c:d6:88:15:cc:a5:
b0:e5:1e:e6:c5:d5:4d:fe:21:19:fb:bf:3f:9a:30:
f8:3b:45:6c:6f:67:57:d4:1d:c4:2e:f4:8b:3d:6d:
52:d3:d1:72:22:e5:99:c7:56:82:84:4e:89:88:92:
40:49:fd:04:71:97:a2:93:88:8e:7a:9d:cf:4c:0c:
e5:96:f7:94:37:10:fc:0c:98:4f:8a:c6:7d:ca:2b:
3b:78:0b:ad:7e:55:94:ec:10:f8:8c:7d:3c:ad:b5:
9a:aa:8f:e6:e8:3c:80:34:4f:6f:9e:69:73:21:84:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:5A:6D:6E:2B:19:CB:6D:5A:1F:1F:44:DB:41:12:67:F5:28:47
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:19:9f:b6:5f:32:bb:eb:50:ec:03:53:21:01:75:6a:11:32:
9f:8a:e2:0f:cc:ac:89:a4:cb:41:cd:db:27:6f:bb:62:2c:a5:
35:0e:b2:95:a5:9b:26:ad:67:92:9d:d5:d1:c4:fb:8d:01:e3:
09:fb:68:67:4f:0f:c9:95:97:52:6d:87:08:85:c6:bf:d4:2a:
e4:f8:0c:6e:ee:0a:45:ec:be:d4:2c:65:26:56:a7:83:1f:55:
36:57:b4:8d:b6:8f:45:50:bc:4a:79:2e:da:d4:b4:4b:a5:65:
bf:cc:4b:e4:1a:75:5b:19:fb:a6:35:b7:80:65:15:5d:81:10:
d1:86:13:59:d7:21:6e:eb:ac:94:33:72:b1:0c:d2:bb:f0:7e:
3d:03:e8:d6:eb:36:96:6c:f9:59:93:69:69:52:27:40:8a:93:
0a:52:0a:c8:03:91:01:99:21:e5:c4:28:61:17:5d:c0:89:de:
50:08:34:ab:01:0f:17:a7:bb:3d:75:e6:e0:e1:96:f9:7f:cc:
74:01:c2:57:ea:4a:0d:87:3b:50:a5:a1:b0:34:85:39:b5:2c:
c5:b2:ca:28:eb:4a:a8:9c:3f:bb:94:ea:da:d4:ba:0b:de:cc:
88:97:a6:29:00:15:3e:bc:8f:13:39:a6:66:1c:bf:27:6e:7b:
ed:d5:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:23 2025 by rpki-client