Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: 8CXXoYGdyw3J17gxlPNd75th5k6B59w9iAoz2RnQW/M=
Subject key identifier: 5A:18:B2:AD:61:31:6D:1A:6A:72:0C:C7:66:2A:60:D8:06:90:7C:52
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019A085BFD2F9FD0A2202EB86B226178973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 0EB1
Signing time: Tue 21 Oct 2025 20:00:37 +0000
Manifest this update: Tue 21 Oct 2025 20:00:37 +0000
Manifest next update: Wed 22 Oct 2025 20:00:37 +0000
Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: EmafFRGi9NmQr+bADVBuGfeM7Nn/CVnZ3UXs6iQ8KBY=)
2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:5b:fd:2f:9f:d0:a2:20:2e:b8:6b:22:61:78:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Oct 21 20:00:37 2025 GMT
Not After : Oct 22 20:00:37 2025 GMT
Subject: CN=5a18b2ad61316d1a6a720cc7662a60d806907c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:8e:01:c9:a3:ae:95:27:57:b8:bd:30:86:
58:b6:09:c1:56:8f:b8:bc:1c:e1:e5:8d:71:e8:ff:
fd:90:e5:19:a6:0c:6b:52:28:a7:84:8a:97:e5:44:
c1:c7:0a:cc:3f:6a:bf:a7:5b:fb:c8:62:36:ee:50:
aa:b1:fd:55:a5:52:a3:93:79:78:ec:b6:5b:85:ca:
3d:09:9e:4d:a1:59:a8:4a:99:60:79:8c:0a:5c:b0:
c7:0c:96:bd:51:56:3c:14:b3:ff:c2:57:2a:9e:8b:
2b:63:f3:8e:a6:12:36:ed:a0:f7:83:40:fe:e8:cc:
51:0c:94:e1:e0:11:32:6a:a9:c9:d6:f5:49:f3:b0:
d3:7d:a6:a0:78:30:0c:93:4a:83:19:8a:bb:fd:84:
d6:9f:a7:ae:3d:d9:5c:84:93:7d:f1:ed:15:ec:73:
38:26:4c:de:89:fb:c9:b4:3c:fb:a0:9d:fe:3d:0b:
f1:98:44:e9:d2:78:db:99:29:43:7a:52:58:4e:89:
25:d8:99:f2:0c:a9:82:42:1a:30:9a:e9:d0:bb:a9:
9a:aa:af:68:b5:57:75:d7:80:b8:f6:90:ce:1e:d1:
ec:cd:ed:84:91:de:61:e1:49:35:95:41:02:e0:d1:
ec:47:2e:e5:30:05:3b:34:fd:25:50:a6:5a:16:ed:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:18:B2:AD:61:31:6D:1A:6A:72:0C:C7:66:2A:60:D8:06:90:7C:52
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:39:1c:90:68:59:ef:44:45:2a:b2:76:a5:4e:11:62:30:f7:
34:99:3e:d7:9c:0d:a0:23:db:e6:dc:52:5c:6e:9c:12:e5:5e:
63:63:df:28:4f:de:07:d3:c5:13:0e:02:99:7c:fc:71:ec:8c:
2a:83:02:94:19:cc:94:27:e3:2a:19:aa:8e:4a:30:b5:31:55:
68:9a:bb:7f:92:1f:2c:25:7d:a5:ce:94:a8:af:59:88:94:79:
2a:5f:64:ef:b6:52:9a:14:a6:60:e3:cf:93:d6:83:b4:90:91:
e5:5d:ac:22:04:d8:51:df:1a:84:ce:7c:49:b3:1d:ee:c0:86:
3e:09:81:99:97:32:38:f9:62:de:11:3c:4e:23:5b:04:ad:4b:
9e:91:59:2e:27:7f:f5:0d:c5:59:85:69:06:58:15:95:32:2f:
3d:37:ae:64:52:c1:d9:c6:0a:28:f6:e3:7b:db:3c:1f:c8:a6:
12:2b:4c:cc:05:22:b6:97:b7:87:60:bb:06:58:ba:9a:55:d3:
4d:3b:97:62:62:56:1a:ea:7f:3a:5a:0e:fc:5a:b2:f7:d8:bb:
15:b4:8c:70:25:8c:5b:b5:7a:a0:41:87:d5:a0:e0:fe:8b:64:
59:79:81:3e:36:c0:1a:78:8f:e4:a5:36:82:80:86:8c:e7:5d:
eb:76:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:09:14 2025 by rpki-client