Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: j647tvTKv+Hg16Jt3xr8cGytvBwOzpjlm70sTHcOIcU=
Subject key identifier: FA:ED:5E:A1:75:5C:4C:99:2A:4F:0F:B2:60:2B:81:52:8E:EE:FA:51
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01993124CAEB39735E145A140F56B861F80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 12C1
Signing time: Wed 10 Sep 2025 01:01:58 +0000
Manifest this update: Wed 10 Sep 2025 01:01:58 +0000
Manifest next update: Thu 11 Sep 2025 01:01:58 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: rO86AOfA/8lN2efJ3irlurPH2lGnOiXalD2iLf4T3us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:ca:eb:39:73:5e:14:5a:14:0f:56:b8:61:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Sep 10 01:01:58 2025 GMT
Not After : Sep 11 01:01:58 2025 GMT
Subject: CN=faed5ea1755c4c992a4f0fb2602b81528eeefa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:6b:e4:de:cf:cd:66:a1:6a:2e:68:4d:f7:
7e:20:c3:98:aa:d3:3d:c9:df:e2:03:66:2c:8e:3f:
a6:b0:1d:72:bc:f1:01:31:2b:f1:e3:46:c7:a6:11:
27:7e:46:42:1d:41:4a:b2:eb:1c:92:83:b6:75:eb:
59:14:91:c1:f4:7c:54:80:c5:4f:0d:da:6b:af:f5:
5c:ca:2d:98:c1:6b:42:95:31:24:68:62:6d:f9:ba:
e1:82:73:3a:40:f2:a9:50:1c:fe:1d:a5:f8:da:82:
c8:60:44:91:f0:43:a4:8a:de:d7:a5:53:3a:f1:11:
bf:8a:a9:5d:d0:5b:ed:e5:dd:81:85:1a:d0:6c:8f:
95:3f:9a:52:43:66:03:b4:01:ef:d5:d4:0b:33:d1:
be:5f:3f:c7:53:5e:00:ea:dc:1f:e2:41:d4:ec:b8:
cd:13:81:da:eb:96:80:f0:d8:a7:a1:96:07:25:1c:
f3:4e:39:bf:03:03:61:a3:47:9a:2c:6a:7c:9c:b7:
ef:de:a0:52:99:74:d3:b8:cf:a4:e3:be:90:2b:51:
f6:12:97:ba:a2:a3:8e:76:b3:cc:ed:84:c8:9b:cd:
7e:00:d2:c2:fb:21:22:de:29:18:87:cf:43:98:c6:
2c:2d:c6:7c:55:14:16:67:ea:c6:f0:a0:6a:73:01:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:5E:A1:75:5C:4C:99:2A:4F:0F:B2:60:2B:81:52:8E:EE:FA:51
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:24:02:3a:7b:3a:90:4b:75:82:d4:ef:b1:39:76:fe:f8:
19:5e:37:a2:b3:32:ef:4e:3d:b4:2b:0b:0e:c7:99:5c:b9:c2:
4c:98:47:f9:c2:d1:26:21:13:0d:ad:f7:f2:35:7b:ed:c4:3f:
18:15:9f:01:fd:bb:d2:90:d0:ad:97:b9:41:24:c4:cb:23:25:
45:b6:2e:e3:2e:a0:52:6f:16:fb:7f:99:42:5e:ee:2e:5e:db:
d9:fb:b7:32:f4:1f:fd:3f:08:41:aa:bf:d2:bb:21:f5:df:7e:
8e:d4:37:c9:19:0b:44:12:67:14:b0:15:9c:2b:ac:70:63:58:
2d:c8:de:48:5f:37:70:55:95:40:db:40:36:3a:aa:f8:11:1d:
c1:a0:17:77:b5:a1:42:39:28:7d:55:59:af:a5:58:c9:a2:8c:
1c:8c:58:b3:02:ac:02:46:d7:bb:dc:ee:60:8d:c2:3f:54:81:
05:89:a5:42:dc:1e:5c:2e:34:6f:f8:c4:8a:f9:8a:23:0f:53:
6a:20:36:c1:95:ee:a6:4e:f1:85:ba:7e:c8:93:d2:fc:4c:f1:
e5:79:95:23:d2:27:a6:92:f6:83:e4:3c:b4:03:00:f3:0c:c5:
d4:2e:35:5e:c6:d3:22:6b:24:33:83:8f:f6:ba:8a:e0:33:c3:
cb:d8:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:59:58 2025 by rpki-client