Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 03QXXmuJvnhZz5qVbYCDiAs3sXgBgdADYHcgvYxv+4A=
Subject key identifier: 48:C9:B3:98:39:45:96:60:8C:5B:4F:F0:8C:D6:39:81:83:31:5F:5D
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0198499C00A062E21BA10AA53559AAD296DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 02:00:16 +0000
Manifest this update: Sun 27 Jul 2025 02:00:16 +0000
Manifest next update: Mon 28 Jul 2025 02:00:16 +0000
Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=)
2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: onzBhDZVbuKGhZZnUJX9qi07/lgoCDBCk4tU/mjktO8=)
3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:00:a0:62:e2:1b:a1:0a:a5:35:59:aa:d2:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jul 27 02:00:16 2025 GMT
Not After : Jul 28 02:00:16 2025 GMT
Subject: CN=48c9b398394596608c5b4ff08cd6398183315f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:8a:8b:92:fd:0b:dc:1d:58:84:07:42:7b:
ac:b9:31:2f:af:23:18:04:a8:3a:e0:e6:f5:4d:e0:
74:17:f4:b5:6a:be:0a:d5:22:eb:bf:0a:78:89:b1:
f0:de:b0:3c:d7:3a:ed:f5:92:9c:bc:47:54:12:79:
30:a4:ba:a2:7d:2c:10:11:1e:da:fb:61:59:f2:bd:
0f:93:fe:d0:44:73:bc:1a:f7:c3:c6:36:6e:f8:8b:
cd:06:d2:71:3f:72:78:76:6c:4b:b3:2f:bb:1b:b0:
13:b7:6e:89:17:6a:c5:7b:91:49:97:9d:32:e4:ed:
88:20:1e:90:98:db:37:6f:91:b2:92:8f:74:3c:5f:
f7:69:46:fe:7e:fd:1c:a6:ac:ef:3f:da:e8:2a:0b:
b1:f0:52:30:d5:60:42:5b:73:45:6d:56:55:b4:85:
8d:0b:5a:f5:1b:63:2b:04:21:dd:15:47:b7:74:14:
27:fe:7a:67:4b:97:a4:a0:7d:9b:10:8a:00:9b:30:
77:ea:89:5e:9b:68:3e:db:68:35:f7:c6:53:ac:d4:
4f:fc:b4:12:50:76:b3:75:29:f2:58:23:22:5a:5d:
f2:bb:2a:0d:5a:b6:23:7b:84:cc:a5:89:23:5f:5a:
c6:e4:d0:59:ad:5f:ef:a7:e5:59:3f:41:b4:69:6a:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:B3:98:39:45:96:60:8C:5B:4F:F0:8C:D6:39:81:83:31:5F:5D
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:37:9d:0f:c1:04:e2:41:a7:65:ea:f2:bf:cd:99:d7:03:
40:bd:1b:6b:ca:cd:41:84:88:1d:39:c2:a8:2a:09:50:fb:e1:
d8:21:5f:69:7f:cc:3b:d5:9d:70:1c:50:3a:a6:e1:e0:f4:a1:
64:41:ed:1f:9c:86:1a:73:10:c5:95:d1:14:56:41:5a:4d:60:
90:43:eb:38:0f:5b:34:ba:99:64:ed:9e:63:00:dd:87:ff:34:
da:bd:11:96:e0:68:06:a8:0d:70:e4:88:b6:b9:cb:97:db:80:
64:9f:9f:f6:3a:63:ff:f3:61:dd:0f:5d:a8:c3:b8:be:b3:ba:
17:1f:5a:85:a8:ae:48:77:7a:b1:ec:d0:1b:00:b8:0c:4e:7b:
9b:87:3f:13:98:23:52:01:88:e4:1e:72:a9:ea:f9:52:88:e1:
02:3b:2a:97:cc:98:95:29:e2:e0:89:41:1a:c5:24:f5:f2:b8:
56:b3:f2:d1:e2:d4:c8:f2:01:0e:69:d8:99:a9:64:f2:2d:8e:
1b:24:1b:2d:be:4f:c7:d0:6e:5f:f8:59:ed:ce:ff:34:b0:b2:
c5:6d:26:7b:e1:c0:99:9c:ca:f7:7f:c8:ae:72:47:36:ef:37:
19:72:95:74:f7:f1:a8:fc:52:38:8f:67:1f:31:51:d2:e9:60:
56:38:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:32 2025 by rpki-client