Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: KF/qXvb4ZVF0jCbEyXQ2D0r/8WnHyGgh4uvMuMRA4Cc=
Subject key identifier: 9E:EF:05:51:B4:7D:70:62:A2:A4:5B:7F:57:3A:B1:B7:A6:8A:EC:54
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 0199FEEBE11110B3CF55E3CEC2474974E21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0AFE
Signing time: Mon 20 Oct 2025 00:01:35 +0000
Manifest this update: Mon 20 Oct 2025 00:01:35 +0000
Manifest next update: Tue 21 Oct 2025 00:01:35 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: nzn/ADhlNF+LPPdfaPfhTQs5LhCH53n8rESPaAOEXac=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e1:11:10:b3:cf:55:e3:ce:c2:47:49:74:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Oct 20 00:01:35 2025 GMT
Not After : Oct 21 00:01:35 2025 GMT
Subject: CN=9eef0551b47d7062a2a45b7f573ab1b7a68aec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:53:ef:cf:0c:b8:96:2c:3d:c7:72:15:f6:
ae:86:a4:4c:60:1a:54:6c:8a:2e:21:b8:e6:fa:85:
f9:da:f6:d5:f6:5e:ea:95:ee:c7:38:ae:34:8f:b9:
15:6e:8e:c7:13:5f:7c:f2:5d:51:3a:b6:51:f7:ff:
3f:64:1c:92:d1:18:6e:1b:8c:dc:02:99:e3:ea:ba:
7f:f4:e5:86:76:b4:6f:b4:5c:23:a7:26:68:4e:83:
ae:3d:6a:6b:6f:1f:8a:03:3a:1f:88:b6:72:a6:67:
00:57:12:12:43:d3:1e:ae:25:54:8f:55:1d:94:cd:
6b:ef:bc:e1:d3:bf:88:8c:7f:c2:9b:77:ae:3e:16:
aa:ce:27:33:9d:d7:d2:d0:41:51:20:b5:b1:de:5d:
c6:9a:6f:5f:ac:55:e9:32:ff:71:db:ce:58:56:e6:
76:6c:a1:e6:ee:cd:7e:83:e3:8c:2a:48:57:57:43:
aa:22:58:26:9b:f6:90:23:2c:59:43:0e:50:c9:67:
98:b9:77:ca:4a:b8:d8:37:e6:b2:9d:ef:30:b8:59:
df:9d:88:ac:13:09:35:72:1f:e5:1e:50:32:52:b9:
79:4d:08:a3:90:ad:1c:54:86:ba:c7:12:a4:7c:b3:
6b:72:86:18:d6:82:4b:2d:64:35:98:20:e5:17:08:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:05:51:B4:7D:70:62:A2:A4:5B:7F:57:3A:B1:B7:A6:8A:EC:54
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:3b:cb:be:94:0d:63:c0:13:c8:e1:65:f2:d3:33:f7:62:
50:5c:28:3c:90:03:51:96:1e:c9:95:5d:51:61:7d:27:f0:34:
f1:11:ba:2c:b9:bf:18:eb:08:59:c4:92:32:cf:93:29:0b:e9:
dc:60:0a:68:d9:d6:8c:11:46:42:05:02:80:9b:16:d5:8d:d7:
34:00:42:2a:d1:bf:48:4e:b2:29:35:7b:58:15:aa:7e:2a:a4:
dc:8f:c9:2c:fc:b4:76:1d:c8:a6:5b:16:71:9b:68:19:93:7e:
0c:16:b2:72:d8:4b:ce:14:7d:67:22:28:89:12:3f:aa:64:39:
9f:7d:1f:4d:0e:6c:82:7d:e1:70:4e:c7:03:83:b1:c0:5f:68:
77:81:49:26:75:8e:ea:08:01:f1:e8:6f:0b:42:5f:15:07:dd:
51:d1:f1:c1:bf:04:8d:f7:30:dc:12:f7:fc:fc:67:6b:58:09:
9c:01:0c:f5:fc:6e:24:e2:c3:0d:fb:3c:85:41:ea:74:ed:2d:
3e:f0:40:bb:5a:24:39:67:83:78:a0:5e:8a:32:96:bd:1c:ac:
b5:48:93:eb:2d:a8:31:d2:5f:75:af:42:9f:81:e1:18:fc:f8:
48:86:94:4d:cb:fc:8e:c5:66:c6:f8:ff:92:88:2b:67:80:72:
aa:d0:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:08 2025 by rpki-client