Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: g/xOwmR887PjMrjXWmrOxxeG63BK2Z5mi5gDno59NQA=
Subject key identifier: 01:46:77:63:AB:76:4C:EF:74:25:9B:90:99:4A:36:F2:71:C1:86:58
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019849D367395F0CD467A67A16F891BD259D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: d+niUQfnNaFSZkORbuocvCERAfVy5AL8f97SJytN9t0=)
3: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:67:39:5f:0c:d4:67:a6:7a:16:f8:91:bd:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=01467763ab764cef74259b90994a36f271c18658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:63:2d:c9:62:d8:36:57:99:4b:d7:62:a5:
ca:88:50:c1:1d:ba:31:20:1a:4b:e2:22:e7:8c:20:
e5:98:a1:b8:1c:f7:e6:9a:ff:81:ea:be:6a:8a:a1:
a5:cf:85:34:67:35:be:0d:c2:ca:4e:be:08:11:f0:
9e:fb:4a:83:6c:32:91:ab:4c:a2:0f:79:d2:8c:33:
b8:3b:21:ed:79:b1:01:c3:f4:47:de:33:37:c4:1a:
dc:47:3f:da:d9:62:10:5a:40:cf:5a:cd:94:a5:a9:
e6:99:dd:05:d5:e2:8b:fc:eb:35:8b:96:7d:dd:47:
36:5d:b4:c7:b5:f0:f8:ef:9a:cb:2c:50:db:77:d3:
6b:1a:85:05:1b:d6:e8:f9:e8:d9:3e:36:24:2c:8e:
09:55:68:88:41:d2:e8:c9:4e:a1:42:27:d5:8d:8f:
ef:06:38:e7:56:92:30:33:9b:c2:b4:be:86:d4:db:
1c:b5:4d:db:6d:11:ce:8b:7f:b1:e3:02:ee:54:01:
9e:04:2d:0c:60:a8:46:bb:af:7a:a6:bc:2b:9a:7f:
10:d9:05:2e:cb:45:55:de:fb:c7:65:85:f0:de:93:
6b:82:b7:7b:ef:1d:9d:cb:6d:b6:47:23:cd:55:9e:
16:50:8d:1d:a9:b2:dd:23:b0:e4:e8:d3:7f:42:17:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:77:63:AB:76:4C:EF:74:25:9B:90:99:4A:36:F2:71:C1:86:58
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c9:8e:ae:0a:df:2d:fd:cc:16:97:39:d2:32:45:5a:67:48:
b9:c4:8b:19:18:99:8d:49:dd:af:82:cb:a3:37:db:db:69:bc:
a0:bf:61:ed:05:e4:99:98:59:67:e8:d7:a7:7d:45:a3:ab:8b:
15:72:b7:cb:9d:5d:3a:d7:26:5f:00:b3:b8:db:db:bb:c5:02:
fe:a0:8f:20:d6:2c:4b:73:c9:d9:77:40:39:b4:c7:86:ab:3e:
92:40:4c:65:05:78:4d:53:6f:a0:56:c9:d8:30:3e:1c:66:83:
2c:e0:9a:56:73:05:93:39:69:3c:ee:bf:70:85:12:4e:92:d9:
37:d5:cd:79:2b:fe:bc:c9:62:65:72:ba:59:45:53:5b:b1:17:
3b:01:79:7d:f8:6c:0b:0e:bb:f5:69:c4:6c:ac:51:21:17:1c:
21:f9:08:81:a4:6c:6e:23:37:37:b3:2e:da:e4:3a:b5:59:31:
79:dc:e6:ad:32:9c:ad:a0:85:41:3a:bc:94:2f:8f:6a:55:8b:
b4:14:fa:01:48:13:2f:a4:6a:5b:8a:fd:23:77:e0:52:22:e0:
c4:34:79:de:04:62:75:c9:6b:a6:f6:04:ac:2f:54:7d:b0:d5:
2a:68:e6:af:63:08:0d:17:39:6a:74:cc:62:fe:79:06:a4:99:
21:86:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:37 2025 by rpki-client