Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: zhfztLgr3mAqh0pgO3s+UA/8BxjPWPhKgdXx6SaUoww=
Subject key identifier: C7:F1:16:AD:0B:97:CC:E5:60:30:3C:59:46:C7:61:42:6F:42:D4:61
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 01984A4142D6649CB61ECD8C6330D04B5DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 09E7
Signing time: Sun 27 Jul 2025 05:00:47 +0000
Manifest this update: Sun 27 Jul 2025 05:00:47 +0000
Manifest next update: Mon 28 Jul 2025 05:00:47 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: 961YBuuuG4mxQtgxol6CP0HIa6V0S/MOLUyekqgGdyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:42:d6:64:9c:b6:1e:cd:8c:63:30:d0:4b:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Jul 27 05:00:47 2025 GMT
Not After : Jul 28 05:00:47 2025 GMT
Subject: CN=c7f116ad0b97cce560303c5946c761426f42d461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:12:6b:ad:4d:92:22:6a:92:f6:94:86:c4:
01:f8:d7:b7:f5:f0:45:f0:9f:9b:4e:b8:bb:5c:e1:
2b:9b:b8:b2:77:f0:ea:cc:b1:04:f1:1b:df:4a:7a:
a8:56:6f:20:44:eb:56:4e:bd:d8:12:50:6f:93:cc:
87:bf:06:cb:d5:59:f3:e9:7f:97:f4:7b:b3:3d:42:
67:cf:de:92:a0:28:1d:d1:61:50:2e:1f:3e:2c:d9:
50:1f:dc:6a:4c:05:8c:43:54:2c:eb:a6:c3:f3:37:
b7:bd:bd:20:03:da:5a:5d:91:98:ab:52:87:3c:e8:
3f:ed:4b:eb:2e:01:d6:52:d6:e5:8b:f8:0c:45:5c:
06:79:35:eb:37:44:c2:a2:90:f7:4e:56:17:8f:e7:
c2:14:a9:0f:b2:1f:83:49:d5:ff:6b:23:7d:09:2c:
ec:b1:51:39:84:3e:d9:6d:a8:7e:38:23:68:ed:ec:
0b:22:b5:49:a7:e4:55:6e:63:90:66:ae:a7:48:04:
e6:90:a2:1b:d3:09:80:23:b1:d9:e7:d4:25:87:4a:
8f:51:02:e2:55:50:13:42:69:4e:6c:48:56:d7:48:
30:81:cb:d5:55:bd:a2:02:4b:7e:9d:a6:aa:c4:c3:
1f:92:49:38:2c:27:8d:d5:91:cb:32:80:21:75:2f:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:16:AD:0B:97:CC:E5:60:30:3C:59:46:C7:61:42:6F:42:D4:61
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:5d:1e:1a:ac:9a:0d:36:a9:30:f0:ff:79:12:31:ca:35:
5e:fe:fe:6e:99:24:89:a2:0d:f4:59:a3:2d:ad:36:e3:b7:3b:
8b:de:c5:4e:bd:5b:36:fd:e9:0a:37:1d:c0:44:d1:c5:d0:ce:
51:2d:cd:2d:2d:ef:32:c8:47:6b:aa:a6:6f:fa:59:65:2c:e5:
0f:97:6d:9a:d7:f6:da:d2:47:f6:07:ce:58:a9:f0:df:65:27:
6f:3d:55:17:da:7c:8a:e8:52:ec:ee:c5:d1:b4:93:a2:5c:de:
21:5f:3c:5f:af:86:19:8b:5c:15:ec:ae:65:a4:74:83:ef:85:
cc:a3:df:5e:2f:9d:69:2f:ac:97:e3:70:ea:36:82:2d:62:e9:
22:d1:7f:4a:61:8e:2f:09:a1:55:84:6a:3a:6b:3a:43:8c:aa:
da:4e:a5:4e:25:4d:8d:ec:ff:c0:92:2e:e7:4a:14:71:29:c0:
e7:63:42:5f:00:0b:1a:bb:00:82:9e:74:1a:0f:58:a4:24:e2:
a8:c2:4d:3c:89:60:a6:72:2b:4b:48:97:fd:f9:c2:51:05:79:
93:49:e2:02:56:1b:8b:88:fa:98:b6:ca:37:21:e7:98:55:92:
fe:4d:ea:d9:be:7b:b6:23:97:45:c8:35:0a:68:5f:29:eb:98:
1a:c5:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:20:21 2025 by rpki-client