Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: Wgs+80JruyFkGc+jx49ZJCoXjlJrfpwB/DXM6dZuMT0=
Subject key identifier: 2A:FC:71:A2:E1:0A:22:02:90:F5:57:F0:46:B6:D4:63:2A:81:03:D8
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019A71B82AF2D6F84A6FBE9032CFAA132DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: REMpTiujJ95NOvmUmBDKTSmsh2XBv/sPNWJebgosVLQ=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2a:f2:d6:f8:4a:6f:be:90:32:cf:aa:13:2d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=2afc71a2e10a220290f557f046b6d4632a8103d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:9c:22:6b:52:89:92:b3:d8:c3:57:d7:c7:
2e:2e:09:50:ff:8a:a7:48:5f:00:af:5a:96:26:0f:
ba:c5:0a:75:a4:10:db:10:5d:8f:dd:88:0a:64:13:
49:11:c0:f3:c9:a8:64:59:e7:a2:3c:89:ab:e1:eb:
03:ac:b3:a6:92:c8:8a:38:79:17:b6:bf:ca:5a:43:
f1:c6:60:ea:d0:61:33:50:7f:20:de:84:f9:bc:80:
24:79:73:66:65:11:ef:bb:66:2f:36:f8:65:09:5d:
70:6e:6f:76:e5:b9:66:2f:2f:f5:77:68:01:42:66:
f9:65:49:6d:3e:8c:dc:a2:3f:e5:e5:db:0a:b5:f3:
d8:bd:a1:b7:f7:36:1f:ab:9b:88:c7:a9:d2:d8:52:
58:ef:5a:26:7c:47:ba:4a:57:13:d4:3c:dd:bf:c3:
91:30:27:8d:57:ca:8f:f5:4b:1a:6c:5b:b8:ad:ae:
ab:6c:20:f0:c2:0e:15:f4:d2:d5:ad:10:cb:ff:56:
83:54:b2:e3:76:88:2f:da:9f:e3:18:74:c8:90:79:
73:e9:c3:e6:0f:3b:06:d7:46:f7:9d:94:89:18:a4:
9d:20:9b:73:0d:4a:b1:a6:06:93:94:b6:d8:11:a1:
e2:4e:c6:1a:18:ea:ad:ad:86:0e:0c:8e:af:bb:0c:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:71:A2:E1:0A:22:02:90:F5:57:F0:46:B6:D4:63:2A:81:03:D8
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:0a:20:7c:bb:6d:ea:05:fe:a5:34:df:bf:c8:06:65:31:
4a:ae:09:12:ec:82:9c:eb:ce:f2:3b:2f:62:93:96:b3:11:37:
6a:05:fe:13:df:3c:c9:88:e9:56:37:a5:e2:fb:dc:56:d2:88:
f3:36:b7:d7:35:9d:51:f6:4e:dd:13:21:6e:e0:03:eb:fa:53:
fb:22:8d:5a:82:de:c4:5c:fc:d2:e6:73:ca:7d:09:6a:ec:8d:
a3:0c:46:59:e7:0b:84:1e:81:db:85:b3:00:88:ef:3f:44:70:
89:54:35:af:75:c1:c7:2a:ae:05:f3:e9:b1:a6:89:5c:f9:32:
fb:7f:bf:1e:20:f2:04:ef:3c:2d:12:c4:e0:0f:f2:59:7f:f8:
12:d8:3f:a5:45:05:91:4d:80:c3:5d:3b:bc:89:ff:30:43:32:
43:4b:62:0b:a1:9d:b9:ba:e8:e4:79:6d:bd:6b:24:3f:e2:38:
bc:b5:99:dd:4e:c7:34:f6:76:91:93:89:cf:21:6f:ff:d0:54:
cf:d7:7d:17:4e:4b:cf:f8:c8:65:b0:b5:bc:51:47:2b:88:1a:
5d:ae:83:ef:13:75:82:a4:11:7e:d4:6e:15:1b:67:82:a2:97:
d6:0c:e4:3f:43:48:c4:43:19:84:12:0e:c5:ee:26:15:11:99:
ef:46:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client