Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: 4rmpF39D75ZYoaiyjM5Se7rL6iS+f9876ZaHZmucu5k=
Subject key identifier: 4C:DC:6E:06:63:03:45:6C:E5:48:88:E5:AF:25:A2:88:99:92:12:48
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 0199228D355B725B96889CD5BAE1A899D8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:43 +0000
Manifest this update: Sun 07 Sep 2025 05:01:43 +0000
Manifest next update: Mon 08 Sep 2025 05:01:43 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: iRCtjkdxd9G80N2GlaI8yBPYIP/K+EEpG/v0Ct+4/Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:35:5b:72:5b:96:88:9c:d5:ba:e1:a8:99:d8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Sep 7 05:01:43 2025 GMT
Not After : Sep 8 05:01:43 2025 GMT
Subject: CN=4cdc6e066303456ce54888e5af25a28899921248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:7a:9a:c3:49:44:01:35:c4:71:2c:e7:70:
70:14:b3:cf:be:bf:b0:5c:b3:b1:29:bd:ab:a5:17:
f7:3c:b5:ab:ba:03:bf:48:61:13:01:4a:9b:de:36:
45:21:00:c5:63:1e:af:f9:35:a1:bf:14:25:65:8b:
30:1c:72:f5:4a:7a:66:b4:51:27:0f:32:cb:23:aa:
c1:8b:5e:40:7c:bd:5c:c3:d3:9e:5c:5a:c7:6e:16:
a9:7d:f0:98:c2:61:7d:ef:45:bb:0e:75:0c:cd:9e:
b8:fb:8c:69:ed:f2:0d:a0:23:31:91:f0:cc:35:3d:
00:3d:5f:ea:50:54:39:55:74:16:6c:a5:37:ff:76:
93:14:b9:ad:52:2e:14:e6:2a:33:fc:4e:67:4b:a0:
52:06:5b:11:0b:d2:8f:ec:bb:bb:ae:58:88:50:4f:
10:4d:99:00:b8:bb:51:72:25:c9:fb:36:7c:17:e5:
f6:ba:4b:7a:55:5f:3f:e9:5d:1d:51:9f:a7:6e:5a:
a0:ba:67:25:04:bb:c5:00:7f:ee:47:dc:87:38:05:
c1:1d:3f:ac:d8:fd:ff:23:48:13:62:33:26:70:ab:
70:0d:60:d5:a5:f5:d9:1d:7c:34:0a:10:5b:1a:2a:
d4:15:e3:cd:5a:06:4e:7e:82:e0:58:14:0b:57:fa:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:6E:06:63:03:45:6C:E5:48:88:E5:AF:25:A2:88:99:92:12:48
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:71:02:fb:df:f6:94:cc:40:2e:04:1d:44:e5:3c:2c:56:
96:5a:bb:65:ee:4d:fc:76:b3:af:02:c7:9e:6c:e5:cf:64:60:
a7:91:07:df:da:14:06:e4:10:53:a9:ee:e8:60:d2:8c:6e:4f:
c7:c2:d7:97:0f:bc:54:84:e3:74:37:05:66:2c:17:36:9c:1e:
f2:ac:fa:d1:a5:87:94:e6:0d:a9:e5:d9:81:27:8b:dd:30:98:
45:ba:70:5d:4f:b6:9b:41:b9:d6:29:a1:bf:6a:ca:ca:84:e2:
5b:0c:98:61:ea:00:d0:b1:53:39:a5:c0:61:6c:bc:f8:9e:45:
29:7c:9b:24:05:9e:75:3d:8a:ef:d0:c0:0a:93:b2:d2:61:1f:
3f:85:78:7d:f0:45:07:4e:9b:65:80:25:4f:7d:cf:af:ea:f0:
90:61:1a:08:d7:60:3e:df:03:9b:b0:0b:69:0d:37:29:84:54:
54:73:d1:b9:c0:2e:f0:9a:f2:75:46:63:3c:32:77:c2:06:30:
9e:ae:d6:f4:07:09:18:b5:d3:43:04:79:f7:b6:25:d8:97:7e:
10:25:e7:ce:29:21:e5:15:1b:e5:ab:0d:64:cc:61:d3:37:f8:
28:31:26:04:de:c0:39:82:88:cd:7f:6f:24:0a:38:5f:bd:b2:
24:e9:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:25 2025 by rpki-client