Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: 2JrBf0mh1QZoSCQ8Tyd6v23usS3Y7Q1YKVCkq4Cj1+k=
Subject key identifier: 27:AB:77:86:9E:20:DC:32:B8:47:81:D5:48:E9:5F:D4:F2:24:89:9A
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 019853E8EA74FBF458B8DDAA504E99FAD671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 0AAC
Signing time: Tue 29 Jul 2025 02:00:29 +0000
Manifest this update: Tue 29 Jul 2025 02:00:29 +0000
Manifest next update: Wed 30 Jul 2025 02:00:29 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: rBg7yosgLNEMKMOF67h8jRCWmHTKypxh8ssZguf3280=)
2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:ea:74:fb:f4:58:b8:dd:aa:50:4e:99:fa:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Jul 29 02:00:29 2025 GMT
Not After : Jul 30 02:00:29 2025 GMT
Subject: CN=27ab77869e20dc32b84781d548e95fd4f224899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:69:11:47:46:73:d7:ae:57:a2:43:6f:a4:
3b:28:68:16:4c:13:ad:da:05:37:82:73:d6:d3:d4:
0d:dd:ab:41:4f:16:86:97:4f:db:70:99:f8:5a:6d:
78:1f:27:7e:de:76:74:5d:97:e0:f1:01:1a:0f:df:
c5:18:ef:1a:95:27:5c:b7:f3:aa:94:a4:eb:d5:5f:
8c:ce:a4:1f:cd:e8:62:a2:93:62:b4:e3:69:c3:c3:
02:d0:40:a1:a4:6f:81:76:92:07:85:36:68:98:4b:
56:6b:c8:39:63:dc:4c:2e:ff:0a:d2:0e:dd:5d:03:
23:26:ba:4a:38:c7:99:ec:70:86:0a:54:e4:f0:ea:
3a:73:59:b6:5b:67:aa:ee:f5:b6:b9:fa:a1:37:48:
e0:65:8c:4a:98:58:b0:f3:36:20:61:f4:3c:71:19:
66:b0:26:66:95:9b:80:b5:32:0d:21:f1:8b:8d:a1:
61:f4:c9:e4:66:a3:4f:05:fd:e8:12:aa:9d:f3:57:
1e:47:24:1b:90:9e:6a:4a:77:91:2e:db:19:0c:12:
6d:bd:7a:0d:4e:e3:ed:1f:78:a1:f3:a0:91:87:4e:
c1:37:61:fe:8a:6b:bf:dc:38:0c:92:82:e5:34:41:
1a:81:aa:2c:1e:f2:62:aa:dd:db:58:75:96:aa:3b:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AB:77:86:9E:20:DC:32:B8:47:81:D5:48:E9:5F:D4:F2:24:89:9A
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:da:1d:3d:a6:ce:3e:88:39:a6:0f:86:fb:a8:02:45:e7:
7b:8a:84:07:8e:c3:80:30:09:fb:3d:09:bb:2a:cd:9a:26:f1:
7b:ac:21:74:01:cc:d8:25:66:1f:78:49:5b:58:73:ad:69:ec:
c8:f0:00:d0:e8:d3:9e:6c:aa:34:aa:9f:03:fd:c0:c7:33:92:
98:2a:69:45:f5:5c:24:37:ec:e0:c1:fc:4c:21:09:5c:8b:67:
fd:32:8f:39:7f:1e:32:71:2c:9c:79:b9:e7:fa:52:43:da:c8:
4a:ca:4d:4f:71:cf:49:e7:6e:b5:a8:1d:e6:9d:1b:e5:fb:d7:
df:f2:93:c6:92:ec:b7:72:86:e4:d5:be:b3:1b:1e:9c:57:69:
d3:e4:f9:bb:2e:d4:0d:bd:89:b8:f1:08:d8:61:0b:76:27:a8:
2c:eb:80:7d:23:8c:4c:81:a0:a9:87:64:a8:37:6d:cc:57:99:
68:7e:17:37:27:fd:c3:f1:db:28:32:ef:e8:31:a6:77:d1:1e:
ca:ef:c1:21:1a:fd:fc:df:62:dc:cb:fd:d4:16:4d:e0:1d:a4:
fe:9a:0d:be:9d:87:37:fc:6a:bf:e4:f5:d0:b9:75:02:c7:c7:
d6:6c:8f:45:48:c2:d0:7f:8c:32:74:80:62:ec:1c:a8:30:e0:
0c:93:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:09 2025 by rpki-client