Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: 6c0miUQzKzpFcgHtI/U2SN5pUfDu2IaV+zu+N6wa7pY=
Subject key identifier: C9:E6:1E:CD:1B:78:C5:8E:E3:56:7E:60:8B:4B:E0:FF:CF:1E:93:36
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 0198D65F4B5E68DD4F224A139F10DEEA04FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: WJecT24yZuSlTKDrml4f+2iGbsMPbxGJPk0EHPbHgAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:5e:68:dd:4f:22:4a:13:9f:10:de:ea:04:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=c9e61ecd1b78c58ee3567e608b4be0ffcf1e9336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:01:23:be:b6:c9:cb:f3:01:2d:50:5d:16:
9a:f7:db:e1:67:26:87:66:18:53:39:78:41:63:4e:
88:03:c1:57:ef:87:22:1e:e0:93:5b:d2:58:c1:0b:
e0:4c:df:fb:0a:51:4d:9f:35:b6:ce:cb:61:ab:6e:
69:ec:4c:29:df:e3:03:16:d4:9f:02:5a:41:e0:d9:
25:ef:bd:09:6d:16:d8:d2:4b:01:d5:26:b3:22:f0:
6b:2a:24:72:ec:6d:0f:f4:26:ba:e2:34:13:08:02:
1e:62:33:b2:ef:90:bd:d3:4d:83:d2:d9:ac:20:21:
fe:63:16:86:c2:7d:ed:53:7a:5b:e3:e4:58:38:9b:
18:b1:92:28:fb:ea:8e:af:e1:e4:7a:07:63:4f:46:
e9:b0:e4:39:0a:c0:8f:68:45:ac:62:a1:64:3a:c9:
1e:c8:33:90:3d:c4:c9:e9:76:8a:fc:43:ff:69:18:
9a:c9:33:8f:25:eb:22:41:3b:4e:44:83:ff:38:d7:
14:53:3a:ce:3c:cc:4d:8b:a1:99:ef:15:a9:b8:a5:
d9:3e:6e:42:5f:7e:1b:91:13:a4:e9:99:09:85:54:
dc:08:57:56:45:06:02:c5:8b:31:50:90:36:8e:36:
47:15:99:8a:b0:0b:42:c1:d2:3c:7d:1f:81:b0:9f:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:1E:CD:1B:78:C5:8E:E3:56:7E:60:8B:4B:E0:FF:CF:1E:93:36
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:9a:5b:be:12:e1:d0:11:9d:99:d6:05:05:25:a7:4c:01:
b3:93:de:c8:55:12:f4:d9:09:e4:a0:0a:46:f1:02:3b:df:04:
81:ad:d3:8d:c2:b3:8a:a9:1d:61:98:fd:e1:80:f8:fa:01:93:
f1:13:85:0e:42:63:bb:72:ee:0d:9a:ff:64:0a:52:15:3a:ff:
8e:9f:67:c7:72:5b:6e:e4:97:69:2a:ea:ad:45:fa:fc:19:fc:
10:31:b6:d3:ec:bc:f3:20:77:cd:8e:58:69:06:f6:16:7e:93:
28:5b:98:21:1a:f5:4d:13:cd:97:29:d3:e1:98:14:dd:ab:80:
b8:0b:fc:eb:2d:4a:a0:1e:46:56:4a:87:7a:b9:21:5f:a8:07:
36:6c:b2:6f:23:8e:7d:40:51:67:ee:39:e5:b2:07:5a:c8:22:
3d:f3:a3:3a:d5:0c:a2:f6:47:25:33:88:9e:57:35:de:f0:7f:
7a:e0:13:5e:7e:dc:1f:8c:cc:fe:3e:4a:57:df:ae:7f:0d:6a:
9c:3c:f8:d6:eb:29:75:3c:0e:a2:9e:39:08:a9:78:ee:3a:bc:
97:39:97:4c:fa:ac:5a:18:cb:7a:5b:fb:86:ff:96:7c:ac:4a:
ea:d3:7b:cd:db:1f:a5:63:c6:62:13:72:fa:cb:a2:1f:4c:6f:
ca:7c:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:39 2025 by rpki-client