Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: J2N/BT4wcrZkEKneVdE9tj10aebWDLRxezGt6919woE=
Subject key identifier: 78:D6:95:2D:65:D6:41:66:FF:ED:A4:7A:0E:34:F2:1E:DB:B7:8A:D5
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 0199FBEB94C0B9F9D1F614724F54AB0F9310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0A37
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: Z+NnZi03Cn2e2Wd/bgPcFZCSimqXVWpQbLkuKfYlt2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:94:c0:b9:f9:d1:f6:14:72:4f:54:ab:0f:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=78d6952d65d64166ffeda47a0e34f21edbb78ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:ad:dd:91:28:09:fa:9e:3a:8a:96:62:86:
39:6c:4d:82:7e:ef:fb:62:b6:85:f1:dd:4e:59:eb:
5d:62:96:b6:0b:f4:b1:60:bd:15:ae:d6:82:63:19:
2c:2b:83:62:18:3d:84:24:dc:18:bb:7d:6e:a8:0e:
50:83:3a:41:41:2f:2b:51:e8:90:f5:b0:f6:cd:8a:
51:a1:c9:82:c2:fb:aa:7b:21:83:2e:35:86:e4:49:
a4:51:64:1d:a1:89:18:81:92:c2:33:52:44:de:0f:
a6:c5:b4:9d:ca:4a:92:12:26:2d:9c:eb:58:a8:d5:
ab:c3:1b:25:75:3e:a0:5e:cf:ac:3f:8a:4e:9a:35:
1d:3f:94:b1:39:09:a0:d5:8c:97:a4:b9:e6:2f:b6:
8c:ed:a3:21:ea:6d:06:8f:a7:ed:0c:35:ab:5c:8b:
37:3e:d4:d9:cf:af:a0:b9:2f:9d:6b:d7:a3:d3:32:
b8:00:c5:57:f5:0e:69:ba:9e:67:d4:5d:cf:cc:19:
bb:c5:77:29:c6:23:a9:1d:e1:bf:1c:5c:79:96:5f:
79:8b:fa:c8:c8:9c:2c:7f:07:de:fa:1b:43:86:f7:
ae:62:cc:3e:6d:33:df:65:81:2f:f5:e6:b6:ab:34:
3d:71:40:45:14:90:16:59:1a:fc:56:4a:2e:e7:a9:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:95:2D:65:D6:41:66:FF:ED:A4:7A:0E:34:F2:1E:DB:B7:8A:D5
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:90:b2:ac:b2:a7:cf:66:9f:b5:59:3e:22:88:e1:09:e6:77:
8a:35:d5:da:fd:10:c1:7b:d2:20:50:cc:54:06:85:82:61:fc:
a4:e2:c5:1b:a3:92:28:14:8d:7e:c4:99:b5:42:3d:f7:1c:d9:
d6:e4:3f:65:bd:ba:f1:e7:18:f2:4f:89:64:5d:54:11:07:6e:
01:11:a3:cb:f0:66:40:44:fd:f5:54:3a:32:43:b4:5f:53:5c:
94:07:f7:89:42:a9:c0:e6:78:04:81:a6:a7:5a:bc:5e:bf:04:
10:98:48:ce:f6:c7:30:17:2d:b4:aa:a4:63:62:6e:dc:26:43:
72:35:2e:4e:3c:fd:5f:b6:33:d2:64:f0:10:76:5c:f7:40:4a:
43:38:11:ef:13:f7:7c:f6:e5:a7:d5:b0:19:d5:ad:e1:34:40:
9d:f6:42:18:59:29:a7:39:d2:fc:08:f3:f6:08:f3:ca:72:37:
0a:ce:47:66:68:2c:4b:4d:3c:5b:e0:97:09:cb:64:2a:26:3f:
3a:ac:58:ab:62:61:aa:4b:55:ee:3c:36:9e:b6:b3:da:a6:ed:
5b:40:ae:a0:6c:9c:43:df:71:01:bc:89:91:53:5b:a9:62:ff:
5c:d1:61:a7:29:59:91:d7:17:4a:df:85:27:e8:a7:26:e4:59:
66:d7:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client