Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: TeCoZs8zJdELPJEQ1vB+HnV4q7fpl+t8YoEpWkaStX0=
Subject key identifier: 08:2B:CD:79:85:07:B0:CF:14:C2:A7:C8:69:25:4F:35:4C:3F:84:EC
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01992BFD24E11F09D5B1D70AF0D08DCAA92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0471
Signing time: Tue 09 Sep 2025 01:00:34 +0000
Manifest this update: Tue 09 Sep 2025 01:00:34 +0000
Manifest next update: Wed 10 Sep 2025 01:00:34 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: pjsle9yGHi8dVchD4QxsY9EIOMTdvHaWaAGgAvWDK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:24:e1:1f:09:d5:b1:d7:0a:f0:d0:8d:ca:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Sep 9 01:00:34 2025 GMT
Not After : Sep 10 01:00:34 2025 GMT
Subject: CN=082bcd798507b0cf14c2a7c869254f354c3f84ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:f6:9f:d9:62:f5:aa:5f:c1:cd:35:5e:29:
32:36:6b:51:fb:a7:ca:ff:7d:3e:e1:62:09:66:34:
02:67:91:47:5f:0e:3d:73:25:5c:1e:16:da:fa:36:
f9:b9:d3:6a:51:14:c4:4c:88:a6:9e:19:6d:bb:03:
7e:2a:0f:e8:10:81:be:ac:e2:b9:bd:df:a0:14:b1:
df:73:1c:db:e7:12:a8:08:3b:c4:11:e4:51:a2:72:
5a:7d:cc:91:2b:87:35:5b:a7:48:e8:52:48:0e:2e:
f7:44:9f:e3:3f:bd:4a:c6:d0:51:6c:e7:b5:2d:4c:
e4:da:c9:cc:c0:ab:c6:96:fe:40:36:c6:b4:e7:f7:
07:52:1b:30:27:59:8f:1f:50:ce:21:f8:33:e1:b9:
40:c7:8a:53:7c:9c:8a:50:f5:9f:c4:4c:78:42:e6:
be:2a:c3:02:8b:fc:40:63:d7:b9:e4:25:f2:93:2f:
3a:b4:30:a1:ec:af:e2:81:42:41:43:1f:fa:e3:16:
87:69:dc:31:6e:a6:39:3c:2e:9e:5e:12:03:f2:dd:
c5:02:e3:eb:1b:92:cb:9e:58:c4:6c:1f:89:6c:50:
93:b2:24:6b:8c:fd:28:42:79:96:23:0d:c4:52:b5:
6d:be:7f:c7:89:2a:d1:97:fb:c9:bc:ee:bc:9b:da:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:CD:79:85:07:B0:CF:14:C2:A7:C8:69:25:4F:35:4C:3F:84:EC
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:9e:1b:1d:93:df:d6:58:4c:52:7c:3a:ae:1c:69:e0:7a:
7d:33:1b:3f:c2:9f:5e:8c:21:d3:4c:b5:ef:b4:6b:9d:2c:6c:
d3:fc:06:90:78:e8:fd:7b:33:e6:11:ac:5e:bc:49:a8:98:4a:
b7:d0:59:55:18:52:ea:73:01:dc:c7:66:96:40:4d:f6:a5:f5:
e4:d2:06:50:7b:cc:4b:f9:d3:fa:d3:9e:d6:c4:2f:d6:4b:26:
ef:a1:f9:b4:63:1a:39:55:0a:c7:68:df:56:57:a0:d1:e9:d7:
50:ea:b8:bb:77:af:c9:7d:d3:84:90:bc:2c:f3:52:dd:d9:aa:
97:24:c0:fd:95:d3:86:3f:16:2a:02:e7:a6:5a:bd:8e:e1:0e:
cf:55:d7:cf:21:8f:c1:ea:4d:f9:ee:6d:1e:a4:ca:40:40:5e:
ea:f6:b8:e9:bd:e0:a9:8e:04:4c:4d:a9:e6:fb:2a:c2:22:3e:
87:a8:61:86:2c:1d:68:fb:84:71:37:b3:5c:d5:2e:a5:a4:63:
69:cc:11:fa:93:ed:b0:5f:2c:fc:a3:77:c5:22:e4:88:5b:5f:
9c:e2:68:06:e4:69:18:9d:96:4c:7c:15:cb:3f:59:a6:ba:9e:
14:1f:89:0a:7a:4c:f1:28:15:65:fb:87:c5:2a:37:d5:01:77:
be:68:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:00:21 2025 by rpki-client