Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: VOylHso4ztsMtaY3siXSnrK+6wW3kUzc4PwtT67VQCY=
Subject key identifier: FF:E7:06:F0:A6:A1:03:4B:9C:D9:87:3B:18:00:2E:4A:6A:CD:6C:FA
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 0198D515DE6563B7A77D1B7ABAB22F9C4A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0ECA
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: oDBTBhzogSGF7qnIJuYjwCqwKZR0jErHYX2RmGRsSS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:de:65:63:b7:a7:7d:1b:7a:ba:b2:2f:9c:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=ffe706f0a6a1034b9cd9873b18002e4a6acd6cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:c9:2c:64:f7:cf:2b:b1:34:73:53:92:7a:
a8:a0:76:3f:93:9d:28:5d:ce:f9:f9:6d:7d:a8:f3:
94:61:6a:23:de:a4:bf:d5:2a:3e:02:2f:76:49:5d:
87:2c:a8:c6:0e:56:8f:59:54:68:56:17:a2:6e:e1:
1e:d4:b3:78:ff:c6:fc:d3:35:af:cc:06:01:d3:34:
69:62:48:1b:40:72:f3:c7:c4:7e:1e:82:11:09:23:
4d:74:c0:a0:7b:d5:d2:d8:1c:81:a7:f9:21:da:56:
74:a0:8c:88:13:aa:68:f7:8f:1f:fe:14:20:59:94:
1c:97:ef:4f:33:23:39:1f:b1:b6:29:2b:8b:d9:25:
31:0b:37:3d:21:af:e9:4c:4f:4c:db:e4:e9:ec:e4:
3b:47:3e:cc:41:1c:fb:91:45:6f:32:d1:1d:5a:ec:
a7:27:a5:c5:b2:86:09:38:de:ca:5f:ee:15:ca:fa:
c3:bf:58:22:fb:bf:7b:1c:5f:1b:bd:a8:5f:c8:1d:
20:2b:3a:14:f4:4c:26:e0:51:9d:89:3e:9c:18:5d:
09:35:92:47:17:34:a3:45:00:d1:e4:7e:d3:26:aa:
be:99:5b:24:7b:80:fc:09:24:72:3e:d0:e8:14:c0:
f6:cf:86:27:0a:1b:df:c0:6b:a6:81:9c:ba:c8:47:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:06:F0:A6:A1:03:4B:9C:D9:87:3B:18:00:2E:4A:6A:CD:6C:FA
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:42:a9:00:88:87:34:b3:7e:01:27:be:5c:eb:b9:50:63:5d:
3b:4c:26:90:56:a8:2c:d3:3b:e1:7b:e9:47:6c:79:4d:f3:9d:
34:4e:e9:e5:90:f1:80:f4:4f:f1:0b:43:19:c1:2f:64:31:20:
b0:08:dd:62:01:08:bd:19:54:46:2c:02:b1:cc:33:94:71:52:
18:04:26:71:01:32:1f:d7:dd:5b:19:0c:e6:eb:d6:a0:c1:10:
cd:0e:3a:6b:45:e8:e8:f1:3d:2d:45:d4:95:d8:1c:2d:e5:97:
e7:74:41:bc:b4:2a:76:e5:58:2b:22:48:6d:04:ce:67:b7:66:
a0:55:12:34:c9:33:1b:95:52:23:ac:23:83:23:18:bb:69:e3:
8f:fa:51:03:bb:aa:76:cb:61:ec:54:32:84:04:21:fe:c8:10:
06:2a:9f:51:65:65:ca:f6:5b:55:7f:ce:a6:21:82:1a:1a:b5:
6f:05:7e:88:b7:8b:80:1b:c8:56:ff:b9:1d:1f:97:71:a8:2a:
f1:c6:98:ef:fc:01:d3:49:06:a5:43:c3:5d:52:97:02:d5:2d:
09:35:86:0d:f6:fa:a8:e1:c3:96:6b:ee:ee:43:62:72:1b:df:
52:de:53:1c:48:b1:6e:32:7e:15:48:be:82:57:1f:6a:01:54:
94:9b:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:53 2025 by rpki-client