
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: D1q/ld71q7B6KMz5NVGmkC/RxVqSBmbWH5b94YHIJLg=
Subject key identifier: C3:7C:D8:21:38:50:1C:BC:0E:6D:C9:D0:A3:16:44:B5:8E:F1:01:C2
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0199FC8FA7A55E1BA8A5022FEF73E9CE0A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: xnSFmUy1lKodkHkr/my1Ms0ghYgYiSg4IvUCr3ACmuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a7:a5:5e:1b:a8:a5:02:2f:ef:73:e9:ce:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=c37cd82138501cbc0e6dc9d0a31644b58ef101c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:20:d5:29:03:a1:e0:29:38:d0:43:9d:45:
f4:1f:4d:b7:e4:33:9b:42:07:b2:f3:d4:dd:d6:6b:
40:5c:a4:0e:22:08:24:6f:a3:ca:1d:1c:3a:7b:54:
bf:fa:6a:c3:f6:4d:76:6b:5d:5e:04:15:c8:52:16:
2b:c4:71:48:02:73:df:86:69:59:02:29:cb:4d:1f:
11:d4:ce:50:2d:f3:d7:21:11:d5:67:29:f9:55:99:
d0:db:67:0e:9a:aa:78:27:a4:8c:89:53:c9:e7:8a:
57:1f:3b:1e:51:fb:f0:de:ec:e7:ab:74:03:3b:de:
bc:11:76:68:f1:0e:9d:eb:32:fc:0f:9f:65:5b:99:
bc:a7:98:42:46:8c:76:5f:4c:91:9f:d1:4a:25:71:
8e:3a:23:fe:46:00:c2:59:43:37:18:1a:4d:42:3b:
cc:af:67:dd:7e:c1:30:9e:b5:3f:28:a9:e5:cf:6f:
6e:c7:c8:99:53:dc:7b:d6:59:e0:f3:4e:8b:a6:da:
d6:19:da:f7:b8:70:93:13:45:63:e1:75:b8:1a:14:
bd:bb:09:40:65:94:5c:37:65:32:78:ec:f7:2b:74:
11:ac:c0:a0:85:ae:1c:49:4a:b4:dd:6d:c0:29:e9:
db:fd:42:63:da:4c:dd:36:80:64:1e:f0:d6:9c:f6:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:D8:21:38:50:1C:BC:0E:6D:C9:D0:A3:16:44:B5:8E:F1:01:C2
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:dc:09:df:9a:6f:eb:4e:89:fe:19:9d:2b:7a:42:7f:9d:
62:1c:ca:13:dd:9c:62:5d:bb:c4:b7:4e:27:92:9f:d1:61:a6:
1f:2b:af:73:d7:a6:00:fe:ff:40:8a:0e:18:ee:4d:e8:c8:62:
aa:3b:c4:6e:b1:c6:bc:09:63:2c:aa:04:d1:ad:30:72:65:4a:
4d:ca:15:2a:ec:a5:13:d2:71:f1:9d:aa:a5:be:8c:ce:f2:85:
22:82:b6:04:a7:43:0b:d2:9d:d1:9c:a1:40:1e:9f:d8:d6:0b:
3a:25:28:20:96:da:67:75:97:2c:0d:ed:92:e7:67:21:76:91:
b1:2e:00:77:82:d1:ad:19:36:82:60:f9:f8:18:67:21:1a:8b:
ce:91:5f:42:9c:24:21:1d:b1:22:c7:6a:db:7c:7d:83:56:ca:
46:99:ad:0c:d8:81:af:8a:cb:c2:6f:1e:ee:91:a0:b8:07:58:
10:f4:25:5c:15:ca:1d:20:41:65:2d:5f:5d:f2:7d:0a:a1:62:
14:7e:8e:be:80:37:b2:17:5c:a0:2c:c2:98:ee:fa:ab:ae:65:
74:39:df:16:41:48:2e:6e:a9:05:41:ed:6f:ad:fb:7b:6f:69:
ea:86:70:84:80:84:d9:c9:b9:e2:52:5a:56:38:93:09:dd:50:
3e:f9:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:12 2025 by rpki-client