Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: 6qmSXFaE/0ApNvrVhbCw8fxZNiysuscdUzBYUjdYdDo=
Subject key identifier: DE:49:FA:EB:FD:5F:8A:4F:6E:70:72:81:C8:26:0E:9D:62:E5:26:9B
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019A71EEAE8B11A0C6553D6672383AAC0570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 11D4
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: RUAlTQ+6OhUdEtx+i2t/9kCgW2mawtE0QbFK45Em5Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ae:8b:11:a0:c6:55:3d:66:72:38:3a:ac:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=de49faebfd5f8a4f6e707281c8260e9d62e5269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:80:9b:db:6e:50:79:5c:fb:ee:8c:15:3c:
51:65:14:8f:76:38:ba:61:20:5b:b4:c9:1d:b5:0c:
0d:6d:02:4e:da:1a:9e:f8:a5:31:1f:79:f4:96:0b:
36:d6:74:83:81:4f:82:51:ae:38:24:16:3c:6d:0e:
d8:86:64:bd:10:85:ce:1a:78:6a:64:97:04:aa:ba:
53:14:3b:a1:b4:5f:7e:ab:23:8d:f6:c1:03:96:1e:
7a:50:24:e3:3c:c2:a5:f0:62:2a:1b:8a:0c:dd:c3:
99:cf:a8:ef:c8:15:8f:10:59:ff:2e:e5:8c:e5:10:
9c:c0:91:3a:32:75:1f:db:78:ad:0a:0d:cf:b7:a3:
ea:a4:e0:d0:62:c7:98:99:ce:08:7a:58:79:fd:25:
b0:d2:ee:9e:bd:c9:62:f6:da:6c:08:af:f2:30:42:
48:05:9e:62:12:3f:56:87:5b:a9:fc:f1:a0:bc:90:
b3:9a:b0:01:b6:1f:a7:0b:53:34:6c:5c:64:77:8f:
68:58:d7:ee:72:41:40:44:3e:62:3b:4f:0f:d8:41:
85:f4:e3:6f:29:b6:5e:bc:4e:e7:b7:86:54:39:a5:
90:f3:e4:a3:94:2a:f7:24:dc:5e:78:91:5e:6f:fe:
5a:14:fd:90:2c:b7:11:8a:36:ed:ef:7c:34:f9:09:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:FA:EB:FD:5F:8A:4F:6E:70:72:81:C8:26:0E:9D:62:E5:26:9B
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:22:f5:34:36:e9:a9:37:8b:9f:05:cf:fd:fa:cd:c7:d6:
50:00:d0:4c:f6:55:01:aa:79:d7:64:d8:e2:11:5b:d0:58:15:
bb:b2:1d:40:62:5b:24:da:18:19:f5:09:b2:c6:13:30:d0:9f:
08:78:c4:27:34:f9:d1:23:0e:6e:7b:51:64:ca:29:53:b4:2d:
fc:52:98:ac:33:03:25:5d:fb:79:f3:16:b5:91:0e:28:ec:d6:
8b:3c:b4:52:97:6e:54:ce:81:f1:1d:fa:3c:50:5f:18:a8:56:
24:04:3e:7d:0b:ea:88:6e:f5:5d:6d:8f:5a:bc:cc:93:71:9e:
f2:fc:e3:1e:ac:2e:f2:8d:7d:9d:95:2f:b7:0b:56:99:f6:60:
99:16:89:d0:fd:0f:7d:3b:83:c7:f8:94:70:34:73:8f:7e:d3:
14:48:f1:db:01:e5:c1:f1:dd:34:5f:8f:6c:23:7e:c4:68:5c:
3c:50:e0:9c:54:f4:3d:b6:a2:d3:88:e8:ba:ae:26:56:64:ca:
58:4c:60:39:be:a4:ee:97:cb:64:0b:86:59:45:58:f8:ea:8c:
b4:09:88:ac:fb:89:9f:64:79:e1:b5:90:22:b4:46:53:0c:11:
45:9e:a7:fe:5d:c3:6e:2e:6e:67:8e:39:f2:d1:c0:aa:5a:98:
40:e3:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:11 2025 by rpki-client