Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: OlUyTzeFKfwcCJ6LMWPWazSNNbZ79MjsnAJ6d6mHvwY=
Subject key identifier: 1F:88:E5:3C:32:AE:24:B0:33:D0:01:76:25:43:4C:34:54:D3:50:69
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01984B8AA30CBBCD67F1646C5F7D219ADDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 11:00:33 +0000
Manifest this update: Sun 27 Jul 2025 11:00:33 +0000
Manifest next update: Mon 28 Jul 2025 11:00:33 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: UE1ZwzdlOBo6e+qibprW8Djm8ij6arEFBcCwX/zIjME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:a3:0c:bb:cd:67:f1:64:6c:5f:7d:21:9a:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jul 27 11:00:33 2025 GMT
Not After : Jul 28 11:00:33 2025 GMT
Subject: CN=1f88e53c32ae24b033d0017625434c3454d35069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:71:5e:7a:4d:73:72:32:e3:4b:7c:3c:d6:
55:4a:e7:ec:ec:f6:c2:3b:9c:53:26:19:ed:d1:e6:
3d:5d:c0:d7:18:bd:5c:87:46:92:26:f7:0f:9c:47:
9a:72:a5:47:c4:73:dd:38:f7:3c:7e:e6:83:91:2f:
b7:b9:22:aa:e7:d0:7c:a8:29:df:77:c7:e2:b3:f4:
a7:51:88:e9:53:3f:93:7f:fc:ac:92:aa:62:48:31:
e1:69:6c:1e:2b:19:71:9f:fd:e6:be:f8:5f:16:2c:
3a:07:d2:a1:1f:4a:67:41:cc:60:ac:f3:15:ba:e5:
70:17:c4:73:ab:c7:62:4e:34:66:12:63:d2:92:85:
88:e1:f6:70:ae:60:01:f7:a5:7f:c3:4d:77:b4:66:
11:7c:98:49:9b:92:5e:6f:10:1c:60:21:21:9f:e8:
e3:9e:6c:cf:b9:5c:35:4d:c8:e7:6d:79:c9:14:73:
ac:6a:6d:3c:4f:9f:72:ef:b0:1c:ce:b1:82:b5:ae:
13:53:4c:75:c2:bc:40:f1:4d:d5:b2:3c:41:63:c2:
75:6d:ec:ae:e8:ac:10:db:2c:59:39:03:6b:69:32:
8e:82:14:c6:ee:84:66:de:b3:73:83:6d:23:d6:0e:
6b:4f:ee:59:1a:64:4c:11:9e:59:ec:6e:51:9c:a8:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:E5:3C:32:AE:24:B0:33:D0:01:76:25:43:4C:34:54:D3:50:69
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ce:c4:df:28:ff:53:d5:05:93:2b:b2:a6:d1:88:e5:b8:84:
36:21:b8:24:e6:72:ab:70:58:e7:aa:d7:d0:f3:35:46:05:03:
c2:6a:9e:e1:83:b8:7d:03:15:b6:86:0a:d5:87:91:b3:66:d9:
51:e8:0e:c1:1c:5c:c9:da:b5:0c:b8:ad:32:fd:f1:f6:d1:8c:
11:14:d6:05:67:8d:15:96:17:7c:cd:c7:e9:85:37:91:00:1d:
f6:d9:cb:df:05:95:be:d3:e8:24:ea:e5:ef:56:32:69:27:8c:
4e:ba:28:58:8e:ce:45:c0:71:36:1d:f6:f5:dc:d0:07:14:9d:
ac:91:dc:cf:bb:1e:57:ac:2e:73:9d:28:ed:74:00:c1:bf:ca:
10:90:3c:a2:3c:b2:a7:3b:55:34:59:fc:9b:36:95:af:d7:90:
04:55:87:4c:4d:5f:f5:2a:4f:40:17:f0:de:c6:ec:3f:9f:69:
9f:eb:a3:32:38:4d:fb:a5:c3:83:93:a6:fa:a4:01:99:2e:5e:
8a:a4:7c:d5:4e:cd:39:fb:78:f8:f3:c6:60:72:54:a6:64:a7:
34:1f:5d:9f:0e:c5:2d:d5:4d:73:00:49:1f:ad:f5:0f:c6:0c:
8a:ce:4d:27:26:78:79:07:c0:0f:b0:38:41:b2:86:12:bf:04:
89:9f:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:51:07 2025 by rpki-client