Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: SUc6s3cgAabpNCq6WsDW40x5mtIRJBWTzQRyUCc/MpQ=
Subject key identifier: 3D:6B:36:B4:73:C9:89:AF:FC:74:97:54:03:15:EB:9C:C1:8B:5C:7C
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 019923A0BC8339FC13D33F15D853550EE191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 0630
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: 20i9vIyritx+q8bsKDQw+Q2eWrmJYbxdUHZDNa8zLyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bc:83:39:fc:13:d3:3f:15:d8:53:55:0e:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=3d6b36b473c989affc7497540315eb9cc18b5c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:7d:ea:94:70:b7:00:48:c6:c7:ca:26:6f:
d9:c6:46:ff:c3:16:1f:f2:07:47:21:7f:b9:dd:74:
49:7d:78:8e:a2:75:7b:79:f2:98:2f:d0:33:c5:12:
dc:b6:86:9a:2e:4e:94:c2:5c:b4:4f:5a:38:19:a4:
30:26:67:f9:7a:9a:e6:0e:fb:44:f4:01:3a:61:c1:
75:4d:c8:1d:8a:32:9c:c3:05:52:0f:7f:88:cc:84:
03:19:a6:0a:76:79:94:00:7a:4d:f8:1e:15:e6:37:
9f:2b:83:10:b2:8b:ca:0d:10:ae:68:08:ad:d4:75:
00:9a:cb:07:23:94:02:a6:63:83:99:d2:91:22:16:
20:06:2a:8b:33:be:c9:b0:a8:c6:d9:40:62:d2:eb:
34:60:ef:1e:bb:5a:d8:15:2e:79:9b:34:b4:c5:3a:
5e:5c:3c:fe:6a:d1:ac:20:d8:52:dd:9d:e8:9b:94:
33:db:92:1b:d3:f4:f6:f3:0d:64:3e:c2:8e:65:39:
83:1d:c3:3b:7c:c8:2b:96:58:01:0f:81:de:33:8a:
6b:ec:55:79:ec:6c:17:45:d4:8a:db:24:a2:8b:cc:
56:0f:c3:bc:ce:7e:00:0f:9e:48:14:47:e3:44:8b:
12:72:ef:c5:5a:83:ce:4f:e5:d4:4c:02:6c:01:15:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:36:B4:73:C9:89:AF:FC:74:97:54:03:15:EB:9C:C1:8B:5C:7C
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:09:fb:f6:a8:eb:5c:f6:4d:03:80:3c:5a:f9:0e:33:84:fd:
28:4c:5f:8a:26:46:7f:fa:68:58:92:22:73:16:25:7e:ce:15:
68:4e:13:7a:19:eb:26:48:8a:5c:4b:5c:38:48:ca:de:e1:1a:
f7:92:9a:fe:d0:36:5c:89:f1:33:d2:48:f7:7f:c5:36:3f:da:
46:18:41:e2:52:80:a9:b3:a7:53:68:3a:48:01:f4:cd:29:e5:
35:04:4b:da:21:e6:1e:d2:33:3a:73:b1:fa:3b:1f:9a:bc:f5:
01:93:25:62:39:42:25:7a:7b:16:58:b1:d0:12:a8:3e:59:aa:
0f:70:c6:a3:18:3b:05:dd:88:07:b7:e2:16:f2:78:71:91:bd:
15:f3:84:ad:f9:04:bb:73:db:ac:69:b6:ef:f9:21:90:32:4c:
0a:69:f3:dc:e4:6f:b9:0a:4e:ee:b7:f3:5a:1b:e7:77:34:a2:
8a:a1:50:0a:1d:55:62:97:27:7f:b7:57:75:b1:8b:7e:fc:f8:
94:33:24:9d:87:cb:39:e0:56:cf:c8:ef:6a:df:14:1f:7c:83:
9a:21:0f:de:bd:71:14:41:f5:e6:58:eb:d3:78:14:4a:b1:e5:
e7:b6:1c:7e:d4:31:64:59:80:a9:31:14:7f:86:9f:0d:21:c2:
a2:57:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:10 2025 by rpki-client