Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: iQtcjN70ZHWch/eO0/7rF+BYSaS4V2E9uS9JW+VzdRk=
Subject key identifier: 50:83:CA:3C:DF:28:DC:94:B1:EE:DC:55:96:8A:6F:BF:BE:BD:64:12
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0199FB0ED2AC164E80AF585F7A38F4377770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0E94
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: slJN6c9FbvmTsDi7+qoARzXFB5l5PCe7+kvwDYV6Cbo=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d2:ac:16:4e:80:af:58:5f:7a:38:f4:37:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=5083ca3cdf28dc94b1eedc55968a6fbfbebd6412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:03:9a:e4:d8:3c:d0:37:da:26:93:dc:c7:
91:a5:1c:92:d8:c2:e5:1d:91:cf:b7:7d:53:31:54:
88:fc:15:c2:e6:14:d8:3d:aa:9e:e0:27:ef:48:fa:
e2:ed:83:57:76:1b:3b:2e:4d:d9:25:31:79:e7:3f:
e4:a7:5a:88:55:bd:d5:fa:6c:7e:e5:2b:1d:1c:c3:
5e:21:52:e9:d5:ab:82:7c:15:b6:c1:06:20:dd:91:
8a:77:ea:fc:cb:0c:0e:27:f3:2b:ba:9b:c9:24:d6:
e3:f4:61:06:eb:12:08:df:0d:14:4d:ef:08:ae:c2:
65:70:d5:d2:47:cb:06:1a:73:7f:64:c2:f8:fc:c4:
ed:22:06:a4:92:d0:90:a4:cf:be:e7:eb:77:38:b2:
fa:e9:05:76:05:e6:5c:b1:7b:7d:4b:40:d5:3b:0f:
2b:c7:8c:a1:27:57:73:11:4c:04:2b:a1:1c:3f:68:
55:11:6a:f8:49:52:2b:52:62:f4:21:74:a5:f1:e1:
81:86:ff:f0:63:a2:5b:8d:65:57:59:0c:d7:01:c6:
ba:a8:db:67:a3:2d:6c:f9:7c:76:8d:d9:86:cf:b1:
94:33:7c:0b:41:68:64:f5:e2:f6:5c:29:fc:1a:73:
bd:c4:3e:93:57:a8:51:79:1a:46:47:a3:38:29:0c:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:CA:3C:DF:28:DC:94:B1:EE:DC:55:96:8A:6F:BF:BE:BD:64:12
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:74:eb:77:32:03:ff:ac:65:32:2a:d2:d1:ff:e7:74:2d:2b:
b4:ac:07:29:4d:78:66:17:a1:ba:5d:08:48:ed:3e:f8:80:9f:
4d:20:5d:04:9c:49:9a:96:60:94:a2:47:d6:cb:bc:9a:c5:b8:
8c:83:4e:d7:6f:28:ab:30:71:05:0c:b4:31:45:bd:ff:37:b2:
ce:71:e7:ac:53:90:fd:c5:3d:94:c4:69:ae:37:92:24:04:08:
ac:1b:61:17:1c:97:09:e6:27:c2:4f:2d:87:40:e9:27:6c:98:
e8:60:c6:52:35:bc:3b:51:8e:27:9a:ac:0e:db:80:c4:5a:19:
3e:d8:b4:cb:2a:69:ce:c7:f6:c0:83:da:4a:31:6b:77:3b:ba:
58:a0:6c:48:23:3a:f9:ba:07:52:fa:f9:7c:49:5f:ec:00:83:
cd:95:b4:80:83:24:e2:74:8c:4c:04:62:1e:44:53:df:48:bc:
36:d0:48:5f:c5:0c:82:2e:73:b6:8d:14:39:ec:5a:4a:4b:e8:
a3:03:c1:b6:50:cc:9f:fe:c9:4b:d5:4d:a5:4f:99:8d:de:69:
d8:0d:58:03:43:e7:4b:a5:49:a2:e2:8d:ba:8c:b6:db:62:38:
19:e2:da:90:76:6b:40:cd:1f:fe:0b:3e:16:da:33:14:20:2b:
86:c1:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client