Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: 8U1Y7SzLXhakheNFyPTv4O9DSsFsgs3Pe/0X2pUc12w=
Subject key identifier: 08:BB:E7:4A:25:CA:2D:16:78:61:57:EB:E5:C7:CC:A6:5B:22:D2:23
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 019A71B852F4EA4E30CFA29369204078E4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0E31
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: +U5gRlYXB7zEbmPlAuuthWrw+hKPIkHKrhUcT8LksvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:52:f4:ea:4e:30:cf:a2:93:69:20:40:78:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=08bbe74a25ca2d16786157ebe5c7cca65b22d223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:20:12:96:52:e5:7a:b3:f4:8f:9e:ca:8b:
da:c0:f2:91:20:d2:4c:9a:9c:4e:cb:75:98:93:b8:
a3:3b:b9:03:0e:5b:a7:2e:fc:cd:49:2f:eb:0c:98:
c6:bd:72:19:bc:05:16:5d:31:94:12:96:8f:bd:5e:
4e:19:11:b4:e4:a9:87:cb:c9:8c:e1:4a:cf:b7:54:
45:c8:ca:45:4a:95:2c:14:1b:87:d4:f9:a8:d0:73:
2a:a0:47:79:17:01:2d:57:97:48:7f:f0:cc:44:0a:
85:7f:6b:cf:a2:46:14:3f:c6:2e:52:c6:6d:58:31:
98:29:41:72:f6:64:3d:43:3c:78:ae:86:1c:e8:3b:
c2:2e:93:81:38:39:39:ad:c2:92:94:9d:37:50:06:
b4:f2:7d:c6:69:80:27:df:76:f2:d5:aa:dd:fd:59:
68:bf:89:bc:1c:29:bf:c0:96:6d:93:0f:9b:e0:52:
a1:7e:e9:19:8f:4a:e4:a6:d0:3c:c7:6b:51:e7:38:
65:61:60:ef:2a:25:6b:06:34:2a:7c:dc:ad:94:8f:
c9:28:d5:12:45:17:1f:cb:d8:be:99:7b:37:53:5f:
eb:37:38:da:c4:a1:e6:e0:b4:e3:63:ad:f3:84:62:
cd:d2:92:60:8f:b8:89:77:2d:5c:f2:6a:b8:89:ae:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BB:E7:4A:25:CA:2D:16:78:61:57:EB:E5:C7:CC:A6:5B:22:D2:23
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:b6:e9:58:a5:4c:c8:1b:d7:8b:a7:ed:6b:7e:8a:cd:7b:
c3:99:86:24:3d:00:63:43:b2:ee:50:71:37:37:27:f7:f8:9b:
6c:e4:64:e0:8e:38:36:27:50:26:2f:ed:bf:81:5b:a7:fb:18:
14:c3:b9:7e:af:eb:d4:28:0d:3a:5b:ca:ed:39:94:2c:6d:9e:
b0:fc:82:a3:34:77:ea:a6:00:70:a4:0b:60:a1:e1:85:b2:ae:
48:d5:d9:3d:c0:82:6f:3e:18:eb:30:13:ff:c8:47:10:6f:a7:
30:0b:d7:91:08:79:71:24:09:a4:46:5d:ab:92:04:73:29:32:
9f:9e:d9:b3:c6:f1:90:62:a8:79:0c:c8:a6:86:3d:48:01:de:
4b:b8:7c:0f:ab:8b:0e:fa:7a:ac:7b:8e:84:df:3d:38:72:35:
c7:cb:1f:cc:1c:64:c7:bc:6c:14:32:fe:13:a7:f2:52:df:74:
58:a1:bb:14:41:58:ac:cb:31:d7:dc:4f:ef:3c:0c:39:48:06:
f6:69:83:32:40:25:29:4f:45:12:37:d5:62:50:6a:19:5a:6c:
c4:4b:8c:bf:3a:e3:ff:d0:b5:15:5e:c3:3e:80:42:9e:1b:dd:
e1:98:dd:c2:5b:16:bb:0a:9e:28:b2:f2:ae:a6:f0:3c:1a:39:
22:6e:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:33 2025 by rpki-client