Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: ziRj5hZ3FTkdjnUzQKNU+NYzClsHvCZ8ui7oBW3/+5U=
Subject key identifier: 57:F6:0F:D8:E4:81:38:3F:CB:AF:5B:55:F5:EB:E9:8D:DB:58:B7:E3
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 01995A8DF1F908B547B67F20543BEE070B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 11CE
Signing time: Thu 18 Sep 2025 02:01:15 +0000
Manifest this update: Thu 18 Sep 2025 02:01:15 +0000
Manifest next update: Fri 19 Sep 2025 02:01:15 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: x9xPuB4bR8t3S24nLMYwPoJgXeqTxV0QrX9ezx2mFsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:8d:f1:f9:08:b5:47:b6:7f:20:54:3b:ee:07:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Sep 18 02:01:15 2025 GMT
Not After : Sep 19 02:01:15 2025 GMT
Subject: CN=57f60fd8e481383fcbaf5b55f5ebe98ddb58b7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:79:97:cd:53:da:3d:75:08:10:a4:72:8c:
56:90:df:cb:8f:40:38:f7:ef:58:18:f1:e4:35:28:
25:ba:ab:03:2c:4a:a1:09:c9:7a:36:4e:0c:2d:e7:
e7:34:56:fe:e1:e7:21:a7:f9:f7:26:11:3c:4f:e5:
61:56:60:9b:d3:2c:e7:4d:24:b2:51:ea:d2:65:e4:
cb:e3:64:71:55:ad:6c:46:cd:c3:45:7a:c5:89:04:
aa:a7:78:81:a5:a8:08:03:d1:ea:2d:65:04:1a:cb:
9d:d8:cb:3c:55:70:d9:fb:4e:b4:33:60:51:c2:66:
57:a3:7b:d9:52:2f:ed:80:fe:e4:fa:89:0c:db:dc:
2c:aa:30:a1:e1:da:3f:34:3f:56:85:9d:53:65:5e:
9a:82:d1:5f:41:71:8f:d4:7f:dd:42:e9:65:be:8b:
62:15:e5:33:c2:fe:c6:02:96:4b:11:b9:e4:ce:97:
e4:14:2f:b6:ef:d9:84:ec:42:38:66:10:20:63:1d:
8a:2b:cc:80:a4:9a:59:bf:e4:5c:8b:b8:e1:98:51:
d0:33:2a:34:b2:1f:b7:93:e0:48:03:64:ad:cd:82:
e3:af:e2:c2:15:51:d8:52:32:6c:05:cc:2b:87:69:
72:82:ea:24:d0:5b:59:c3:63:e3:bd:bf:f2:e7:4a:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:0F:D8:E4:81:38:3F:CB:AF:5B:55:F5:EB:E9:8D:DB:58:B7:E3
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:ff:aa:9a:e0:90:8e:17:7e:ce:c0:15:b7:20:07:d8:63:
93:6f:53:9d:e2:6e:09:4a:1f:5f:e1:48:a3:83:59:90:02:dd:
d4:65:07:04:61:86:0d:cf:78:64:8d:4f:9e:ff:86:2d:b1:8c:
88:2f:fe:50:f3:ab:bd:68:c4:5a:23:1b:5f:5a:45:c1:ce:fb:
f1:77:76:23:09:40:c7:32:82:3a:62:00:cc:a1:5f:0b:0c:f2:
12:cd:63:a3:97:3f:e4:7c:a1:27:be:da:d9:81:64:15:fd:82:
1b:e9:a4:ba:d5:14:3c:ec:5b:24:50:99:a8:c7:4c:16:8f:c3:
3f:01:00:ee:c9:b3:72:19:91:c5:d2:a4:48:43:1b:82:d7:18:
8b:bb:62:eb:44:33:f5:da:d0:24:8c:09:12:29:9a:9f:e6:c7:
41:07:f7:b1:c7:5b:d9:a9:96:16:3c:74:90:cc:56:e3:ec:47:
34:9c:7a:97:de:50:91:5d:e2:f8:94:91:1e:02:18:7b:1b:45:
8d:49:ca:ca:b7:61:6c:c6:28:13:80:8d:c8:3f:50:8c:e7:23:
65:9f:3d:7b:9a:4d:0e:dc:e5:91:18:35:aa:9d:6a:4d:50:92:
b8:74:ac:ec:1d:62:4b:97:7f:9b:8a:58:fd:a6:fe:28:d0:f5:
09:17:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:08:53 2025 by rpki-client