Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: b49RVINyMD+/VTaak0DtL9JdJERu4GIWTR9QSgcZIdE=
Subject key identifier: 65:34:E0:4C:4E:0F:BE:1A:37:06:93:B0:F9:EE:77:B7:40:42:9E:22
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 01992443FA2729C7A0526A1CC2BC73047D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0EF3
Signing time: Sun 07 Sep 2025 13:00:58 +0000
Manifest this update: Sun 07 Sep 2025 13:00:58 +0000
Manifest next update: Mon 08 Sep 2025 13:00:58 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: SFc0Mbd87kuMahWKWjjIRdYabuSdMNwB5nLVN34eMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:fa:27:29:c7:a0:52:6a:1c:c2:bc:73:04:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Sep 7 13:00:58 2025 GMT
Not After : Sep 8 13:00:58 2025 GMT
Subject: CN=6534e04c4e0fbe1a370693b0f9ee77b740429e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:fb:25:9f:45:6d:1e:01:8d:f7:27:f3:86:
b5:1d:ff:3a:65:e0:4a:9d:b6:37:2b:1e:eb:14:2e:
a6:3b:42:01:a7:63:7e:ea:7c:27:9e:3a:c2:25:94:
59:33:7f:f7:53:88:c6:16:6c:f1:5c:56:31:b4:c9:
18:ee:c0:b8:b1:23:48:fb:e7:ee:c1:cc:55:e5:48:
c3:4f:61:cd:ad:7d:54:aa:a6:02:0b:d1:fe:9a:85:
fc:df:a7:9a:14:31:81:6f:18:63:2b:c2:4a:0e:30:
22:f2:8c:00:e3:b9:54:8b:1a:cc:2e:cc:b2:f9:51:
c4:44:5f:b7:77:22:4c:c3:9b:ee:bb:ed:97:8f:3d:
51:4a:43:dd:04:53:61:8b:97:92:28:fe:cf:d0:7c:
12:93:7e:e6:15:86:42:90:78:b3:79:8a:f6:e7:71:
65:13:5c:ea:66:e8:44:b4:c7:f8:03:e6:c5:f0:87:
d9:42:b0:39:49:84:b3:fa:ac:e3:07:24:f8:5f:97:
4a:95:75:95:42:35:19:68:ab:9b:8e:fd:1a:89:0d:
de:13:2b:1c:b8:ff:71:56:10:43:8d:4b:33:8f:c0:
c2:a3:87:f7:30:37:ee:87:c8:1e:cc:79:c4:9b:e9:
d5:fb:d8:41:5b:4c:b5:fb:73:9b:45:30:97:20:82:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:E0:4C:4E:0F:BE:1A:37:06:93:B0:F9:EE:77:B7:40:42:9E:22
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:9d:5c:3d:30:1b:4f:0f:68:f2:48:4f:bd:69:fc:1b:ae:
20:77:54:07:1a:a4:02:08:23:14:a1:8e:15:09:6c:11:51:87:
96:49:04:0f:b1:f3:63:15:2f:f9:99:da:20:e8:4a:eb:bb:55:
cc:b0:f3:21:52:71:0c:9f:73:aa:60:62:4a:3b:17:87:40:f6:
6d:5d:8a:b2:02:04:aa:6a:dc:a7:20:e5:49:29:af:48:b6:8b:
00:4b:49:19:aa:17:b7:a9:e6:13:d2:de:f6:46:37:6a:8f:11:
96:fc:1a:8d:82:76:a9:a5:db:41:ea:bf:3b:41:56:64:ca:a3:
9a:b0:04:fd:8c:8c:9f:40:f1:12:0d:8f:a2:55:e7:54:fa:8b:
ce:32:23:d8:5f:e4:aa:d4:b4:0c:c0:bf:a5:74:74:70:68:19:
04:4c:fd:4d:c4:6f:c9:fd:11:d1:c1:52:dc:31:61:22:34:a7:
a4:6d:ba:af:ed:ba:e8:a7:0f:8c:43:fd:b0:f8:71:1e:07:34:
13:26:c3:c4:fb:87:e3:de:bf:31:cb:8b:68:84:c5:5f:95:32:
72:af:b0:fc:ba:b9:4f:41:6c:85:97:a6:b5:82:2c:71:79:62:
20:42:24:0b:74:30:62:45:2d:e4:cc:f3:ed:76:69:9b:d5:d6:
5f:d3:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:36 2025 by rpki-client