Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: PoIwKQZxrn4H+KpzG4vjwRORb4hCSh8hTbyCupe7+ls=
Subject key identifier: A9:9A:EC:08:13:D5:AD:33:3D:45:24:97:44:06:16:18:53:CC:36:EA
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019A2D43DC5132E8C887A03380FDF5A8B194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0B16
Signing time: Wed 29 Oct 2025 00:00:13 +0000
Manifest this update: Wed 29 Oct 2025 00:00:13 +0000
Manifest next update: Thu 30 Oct 2025 00:00:13 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: EnkwnTQW9VeT1CSOQg1StVkmw41XurEbTGMlVoD7wK8=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:dc:51:32:e8:c8:87:a0:33:80:fd:f5:a8:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Oct 29 00:00:13 2025 GMT
Not After : Oct 30 00:00:13 2025 GMT
Subject: CN=a99aec0813d5ad333d4524974406161853cc36ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:b7:d7:11:77:9d:8f:93:0e:65:91:5f:bd:
f2:e0:9c:af:bc:81:80:96:b0:3e:1d:e6:b1:d9:3a:
af:71:21:af:73:7e:2a:91:f9:6d:24:47:8a:12:7e:
d4:4b:4c:a2:e1:7b:61:39:3a:60:df:d7:dd:08:a2:
55:47:bb:d8:1e:00:19:49:bb:d3:7e:40:15:50:39:
27:3e:24:cd:13:6e:2c:0a:3a:b8:19:18:5c:63:a0:
4a:b6:9f:4b:a4:db:65:eb:b0:05:4f:ca:91:e4:30:
89:20:4a:41:f8:af:f1:a6:b6:7a:76:ee:01:94:dc:
4e:94:7b:c4:50:bc:2f:75:5b:46:29:77:7b:36:a2:
cd:45:ac:ea:c6:13:ec:2c:f2:f2:cb:8e:13:b5:80:
24:c6:7d:9f:16:40:ac:7c:1c:d7:e8:2a:02:0a:b6:
7e:4e:80:81:ba:da:7c:60:39:17:b6:c7:a7:4e:e8:
55:f6:fb:39:bf:88:18:de:86:6f:1d:64:87:21:99:
b7:e9:66:32:1b:17:b6:6c:16:99:61:e8:87:89:d0:
f0:75:74:63:4a:ea:4c:8b:41:1c:a3:e9:be:a6:d5:
0f:4f:0f:ce:54:58:30:e5:17:d3:28:59:d6:89:05:
e6:8d:7e:db:13:d4:0d:dc:a4:96:fc:17:7e:f8:16:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9A:EC:08:13:D5:AD:33:3D:45:24:97:44:06:16:18:53:CC:36:EA
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ee:d1:6c:6d:66:8c:74:c7:d2:86:0a:d9:f9:11:ec:cd:0e:
7e:ad:19:cf:9a:42:20:24:2d:6e:54:f6:1b:f4:93:10:eb:29:
f3:86:6a:96:a6:c8:84:06:77:76:af:c7:80:c9:73:a0:68:78:
4f:65:3b:58:13:d3:d7:e6:f2:ca:2c:bd:cc:26:dc:44:70:de:
9e:2b:4d:35:c0:da:5e:f5:34:fc:d0:76:d4:c9:f4:ef:97:2a:
6f:66:57:e4:db:de:a0:72:46:60:69:94:b7:32:59:47:e9:42:
f0:98:01:ef:2c:01:cd:f8:bb:42:5f:91:4b:22:36:66:35:fa:
1d:97:70:16:f6:75:b6:1d:7b:f9:46:48:8e:52:c9:f2:fb:24:
03:59:aa:db:16:9f:4d:45:11:15:36:32:68:28:28:ad:f2:14:
7e:73:0f:1f:f6:93:14:f4:27:d1:f4:68:23:a3:57:70:f7:a9:
72:21:34:c3:a1:e6:5f:cd:c6:76:e7:8c:90:48:6d:b9:83:68:
5f:7b:68:f0:2c:46:a9:92:f6:c0:ab:ee:10:8b:17:f7:ee:22:
b3:ba:88:8f:56:96:e4:a0:2a:a4:c0:79:5a:72:7c:39:67:74:
a2:d4:00:b8:a2:a8:83:6d:48:4e:99:b8:83:19:66:b9:1a:73:
cd:49:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:46:10 2025 by rpki-client