Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: yrPU+YO1uxj5+6XBjIDD/G50961oQ3Sz3UzZ56KwA+A=
Subject key identifier: 50:D8:E3:F8:35:90:1E:A5:09:0F:68:8A:2A:00:1F:2F:F7:32:79:E7
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019A0824E1D5D2117E61ACBA51CBB0A346E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1701
Signing time: Tue 21 Oct 2025 19:00:26 +0000
Manifest this update: Tue 21 Oct 2025 19:00:26 +0000
Manifest next update: Wed 22 Oct 2025 19:00:26 +0000
Files and hashes: 1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: 4bX7TXhW3snbjtIhovmVqSm1Sn6tQYoVZGPX4JhCYvk=)
5: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (hash: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=)
6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:24:e1:d5:d2:11:7e:61:ac:ba:51:cb:b0:a3:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Oct 21 19:00:26 2025 GMT
Not After : Oct 22 19:00:26 2025 GMT
Subject: CN=50d8e3f835901ea5090f688a2a001f2ff73279e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:00:92:e7:74:db:2e:fd:dd:fa:db:ba:5e:
7d:1c:ab:bf:dd:46:cf:bc:41:c1:bc:99:e0:c9:7c:
56:7a:ab:f5:6d:bc:c7:c1:17:52:f2:e4:67:9a:64:
62:16:4b:16:bd:36:73:6c:c5:df:47:e4:67:ea:e4:
d7:fb:62:e7:2f:33:91:b3:f7:a6:e5:12:92:47:6e:
55:9c:8d:f6:4d:83:1d:48:69:db:c0:b4:f6:93:30:
af:6d:65:2d:b8:8f:b3:6b:09:9c:ca:e2:cd:f8:6a:
ec:a4:5a:6f:ce:d6:b8:e7:63:65:47:66:f4:b5:a2:
c4:64:df:2f:8d:8f:db:65:e8:6a:c6:fd:de:f0:ca:
b0:9c:3d:2b:ca:4f:4c:02:df:b3:4a:05:55:ff:63:
d4:d9:44:f0:96:f1:d6:84:06:5f:90:d4:31:d0:ff:
ff:32:0a:6d:c4:c8:7a:cb:6f:4a:ac:bc:1d:d4:c5:
ac:2d:db:59:83:b3:28:21:82:1b:ba:e0:c3:d4:f0:
47:b5:c7:4f:cf:c9:53:da:43:53:d3:9e:de:b7:16:
a9:cb:af:bf:c7:7a:38:37:f3:91:d1:d6:5a:7b:d4:
f1:41:92:75:9f:17:85:35:7b:da:d4:93:ea:c8:3e:
6e:32:16:20:4f:55:5d:25:12:ce:59:1d:c1:b5:e2:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:E3:F8:35:90:1E:A5:09:0F:68:8A:2A:00:1F:2F:F7:32:79:E7
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3f:86:cc:9f:66:a0:d8:3a:04:9e:7e:1c:4b:bd:aa:9e:2b:
23:05:c3:47:c1:35:40:ae:bf:db:5f:22:88:4c:c9:5d:bf:58:
16:be:93:d7:ab:72:cf:be:6a:ee:b5:f3:db:32:47:3f:53:5a:
86:4e:13:09:f4:9f:89:1a:31:0b:d8:f1:dc:76:2f:0a:ea:c4:
cb:7e:6a:0e:6b:05:79:de:03:5b:ff:d8:59:e6:13:ba:f6:d0:
3f:ba:c3:66:5d:d0:ba:9f:88:32:29:f8:ce:ca:b6:c7:ac:5c:
73:93:88:f9:74:72:22:dc:ad:e3:5b:86:f4:bf:0a:39:c8:63:
29:52:ec:33:89:cf:e6:31:c6:58:51:6c:29:67:32:45:94:10:
01:73:db:9a:ea:54:ef:1a:9b:35:94:b0:ff:32:8f:8c:f6:a6:
76:58:09:a0:80:9d:c4:6e:7a:4b:ca:63:6e:b9:a9:65:1b:a0:
8c:88:6f:50:6e:92:45:6f:ef:84:c1:0d:30:eb:1e:a5:a3:64:
7e:01:22:da:de:99:1e:b3:fb:6d:69:fd:df:f2:37:85:93:98:
51:3f:50:84:d3:55:fa:a1:a1:c4:6a:78:d9:64:2f:fb:03:0a:
85:ec:3e:6c:57:e7:62:14:d6:61:36:c5:3d:6f:da:1c:cf:e6:
65:1d:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:24:40 2025 by rpki-client