Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: 2WK6c0iyTUs+Oh/ca481N5peCgO3dIeDiYgUNriYhlQ=
Subject key identifier: 40:37:E8:29:CD:FD:B8:14:DC:CC:A8:4C:F0:B7:56:5D:18:92:AF:64
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019A24AECE3A26EE7D2281D8A2F0001CA4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 03DD
Signing time: Mon 27 Oct 2025 08:00:26 +0000
Manifest this update: Mon 27 Oct 2025 08:00:26 +0000
Manifest next update: Tue 28 Oct 2025 08:00:26 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: ohZ4+OzBYwQ837B53Ad8af7QMXsWvDP3l2Q2iqNG9RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:ce:3a:26:ee:7d:22:81:d8:a2:f0:00:1c:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Oct 27 08:00:26 2025 GMT
Not After : Oct 28 08:00:26 2025 GMT
Subject: CN=4037e829cdfdb814dccca84cf0b7565d1892af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:e6:d4:77:8a:5e:40:5a:93:2f:76:6c:30:
50:6a:f1:da:ca:a5:ca:2b:3c:5a:89:e2:3c:38:84:
aa:ec:cd:35:e1:27:c4:fa:22:98:8e:70:15:6a:49:
31:0d:ea:b3:4b:43:2c:e2:1e:f6:05:88:00:c6:e3:
17:53:c4:b6:01:00:1b:f1:d6:b1:f1:d3:39:3d:07:
67:8d:d0:e1:5f:20:93:ed:c7:33:94:1b:af:3a:70:
67:cf:1a:91:60:60:da:ff:8a:15:c3:d3:e9:58:b5:
84:09:ad:c9:f2:d2:01:30:6e:cf:8f:9e:9e:71:85:
1d:55:b1:88:26:de:a2:59:9e:8c:6e:ff:e2:84:cc:
65:39:ce:fe:af:1b:88:94:3d:23:4b:97:c4:d6:fc:
14:a1:69:7a:9a:a4:da:b3:5a:0b:96:63:a4:de:74:
d9:b6:00:bc:ca:3c:d7:9b:f3:f7:72:f9:58:62:8a:
d1:14:a1:54:58:30:2d:77:ea:49:15:2d:d3:a1:1e:
19:30:6a:bd:e3:9e:a4:5c:9f:32:30:0c:72:f1:60:
21:5d:a8:03:15:e7:1b:72:84:8a:2c:ae:d8:90:4a:
00:de:f8:38:19:83:8f:45:02:a7:21:31:88:d3:3b:
d9:2b:a8:c5:80:14:e6:39:02:e9:85:82:41:09:4a:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:E8:29:CD:FD:B8:14:DC:CC:A8:4C:F0:B7:56:5D:18:92:AF:64
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:75:6d:70:35:88:54:92:ef:7f:f2:48:5c:43:66:9e:70:
61:84:e8:e9:60:2d:d0:d9:5c:16:fb:c9:f5:31:1a:3a:f7:c2:
9c:2a:d7:e0:2a:44:82:d8:c9:a4:e9:8f:24:6b:3f:5f:25:ec:
72:78:46:ac:f8:f0:0f:ea:07:0b:53:f9:2f:db:73:eb:0c:a3:
38:9b:71:00:03:0b:6c:1d:ee:ab:d7:5e:cc:8b:29:00:28:c4:
7f:86:47:58:07:c2:66:c4:99:75:36:a5:48:3e:12:3a:6b:fb:
ff:a8:94:bd:3b:69:e7:8f:31:39:75:df:25:03:98:36:5b:ac:
eb:e9:a3:a1:77:23:5c:9f:9d:b6:01:6a:a0:7b:f1:cb:3c:7a:
24:fd:e2:84:58:e4:9f:e8:9b:ad:c1:c3:a2:31:ba:da:8f:81:
3f:45:83:0e:bf:44:92:6a:7e:d2:82:b1:46:62:79:c4:9c:88:
5f:12:66:ac:b8:97:d0:62:a1:5f:b7:83:04:86:e5:c7:50:3d:
81:d9:e7:67:d8:bf:95:e9:3e:a6:02:21:43:6a:3d:b2:b4:84:
63:2c:8a:71:0f:fc:ff:ba:32:a8:9b:c3:46:3d:76:17:e7:6b:
db:7c:0f:0e:11:3d:c5:fe:16:b3:67:5c:90:01:fe:42:ab:96:
01:79:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:08 2025 by rpki-client