Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: owQ4l+Vy2rNUXl/0fvecLf6eC/DFmdquUxZYVERxpQ4=
Subject key identifier: CB:68:69:E4:B8:61:0F:24:14:42:FC:B3:33:4E:63:85:C5:C7:CB:BA
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 019A2A4475ED1E793B5B8147FD56BDB0A1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0F65
Signing time: Tue 28 Oct 2025 10:02:00 +0000
Manifest this update: Tue 28 Oct 2025 10:02:00 +0000
Manifest next update: Wed 29 Oct 2025 10:02:00 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: y5Daur5nt7U5Q9HtG6Vzrk4D7o0rUBhOh+5yVF1eQ3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:75:ed:1e:79:3b:5b:81:47:fd:56:bd:b0:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Oct 28 10:02:00 2025 GMT
Not After : Oct 29 10:02:00 2025 GMT
Subject: CN=cb6869e4b8610f241442fcb3334e6385c5c7cbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:d1:fd:7d:1d:2c:bc:81:96:1f:34:22:a0:
a9:db:d2:e6:f8:e2:91:be:b2:24:e1:cd:6e:f0:16:
02:12:79:f9:f4:6c:45:da:d1:d9:82:b8:ca:1e:8d:
84:77:89:41:c5:c5:d9:7e:9e:10:54:20:63:9a:96:
4f:1d:fb:47:ba:ef:ce:1c:de:f2:fa:9a:c5:c8:73:
30:45:3b:be:7c:86:66:13:4d:92:6f:b6:8f:ab:9b:
17:ef:2b:5e:bd:55:8e:cb:ae:3d:e6:48:be:13:34:
00:ea:2a:43:ad:fb:06:f5:3f:db:5c:2a:e8:3a:f5:
c8:97:cf:94:5b:d0:bf:5f:7e:a1:2c:f1:a7:90:77:
2a:be:e0:3d:6d:86:8c:49:be:de:9a:0e:c1:d3:6d:
19:ed:ae:52:d5:99:8e:db:a1:a8:1b:3f:2a:f7:dd:
58:90:63:95:65:62:6b:5d:41:42:45:3b:86:a6:37:
86:f9:c8:24:71:f9:79:b0:89:c0:cf:c2:cd:3c:68:
5e:e1:85:67:ac:0e:b3:ba:6e:d8:a8:d3:41:b1:05:
c3:3f:16:c4:a3:a8:92:81:33:c0:5c:f2:d2:cd:6f:
d7:11:ba:0a:c7:9c:fe:36:a9:4c:72:44:56:62:7c:
ca:82:9c:1d:04:22:27:bc:fb:96:92:9a:86:48:61:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:69:E4:B8:61:0F:24:14:42:FC:B3:33:4E:63:85:C5:C7:CB:BA
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cd:ff:00:7b:ce:db:ea:69:73:77:70:df:06:5d:01:61:31:
73:a0:27:52:e3:16:5a:53:ef:2c:aa:29:92:b0:7c:5f:81:5c:
a1:2b:c1:37:15:01:35:85:09:b3:37:28:8f:cc:a8:8e:58:aa:
06:7c:10:59:65:fe:9c:ea:73:63:28:06:78:67:65:b6:74:3f:
66:c4:6e:dc:3d:5f:f4:30:1c:dd:82:d4:95:fe:ae:32:9c:c0:
9a:9d:74:b0:b4:cf:b4:68:dc:30:31:c0:44:3d:04:86:96:9e:
5b:f6:7e:72:29:dd:3b:a9:77:da:49:2a:03:50:b4:95:80:aa:
74:1a:28:93:a3:a5:8b:31:3f:e6:fa:cd:2f:2d:28:32:89:46:
10:27:3c:4c:d6:71:51:b2:3d:59:37:04:f2:a1:1f:09:77:28:
fb:ce:bf:af:15:a7:ec:b7:da:e1:5e:1a:04:f6:ed:d6:d6:8e:
4e:a3:f1:93:d4:df:0a:e6:f3:3b:b0:ff:f7:32:0d:7e:48:aa:
7c:59:19:c1:86:d6:26:c3:57:37:df:8d:05:d0:4d:39:e6:80:
09:6a:c2:f8:8c:fb:4e:33:a2:45:2e:fe:54:75:b9:dc:75:02:
eb:5f:b6:1c:3a:76:e2:d4:6a:9b:79:f6:9f:b1:13:fe:6b:cf:
30:45:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:51 2025 by rpki-client