Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: KoYZCSe0THp/C6ufR8v/mvlrcxZSW4TJCWPqDIr5Zzw=
Subject key identifier: 84:B4:2A:B0:40:22:CD:F5:DE:D0:BA:40:CB:67:1D:31:61:85:BD:A7
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019857213FC3AEE08832E58D4DBC83A36405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 17:00:53 +0000
Manifest this update: Tue 29 Jul 2025 17:00:53 +0000
Manifest next update: Wed 30 Jul 2025 17:00:53 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: lTk9ab4/uyLaTT1YuWGge+XXustd4/7NFDuXyUB+mgY=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:3f:c3:ae:e0:88:32:e5:8d:4d:bc:83:a3:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jul 29 17:00:53 2025 GMT
Not After : Jul 30 17:00:53 2025 GMT
Subject: CN=84b42ab04022cdf5ded0ba40cb671d316185bda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:d8:07:d3:81:8b:3d:17:03:f9:20:e7:55:
10:a8:7d:7d:5c:68:cb:74:af:4b:e3:35:d0:7b:a1:
fb:ed:ff:fd:f3:6f:96:ff:9a:7d:c0:d8:09:77:d7:
30:fe:d6:de:87:d7:fb:54:3c:8e:68:ca:00:00:3a:
a6:2c:58:ce:35:43:06:53:9f:3d:99:65:1c:99:3a:
f2:df:0b:fa:a1:f6:87:d3:0b:8a:0a:86:25:58:86:
cd:dd:c2:d5:23:0b:15:0d:6f:62:ca:ce:6b:7e:3a:
ef:54:47:11:45:f2:22:a6:94:1a:6f:6b:18:cb:c1:
b2:02:92:a7:7f:d3:b7:2d:88:e9:b4:07:d2:08:be:
3c:2b:14:8e:f5:13:ab:34:33:9c:fe:65:db:a6:d3:
b3:6e:16:1b:cf:13:6b:88:6e:81:12:bd:f0:0a:32:
8d:9f:06:57:16:c9:90:39:d5:ca:b8:96:17:18:d2:
1c:e9:dc:f2:2e:cd:9e:8a:08:69:95:69:4a:30:ad:
c7:e3:a4:ac:03:15:c2:6b:16:bd:dd:83:2c:a3:10:
d1:fe:22:e3:be:17:b3:ce:64:b9:fa:91:ae:5c:2c:
25:2e:4c:9b:ba:9d:3d:2c:22:50:84:34:51:a8:e6:
79:d1:3f:df:86:2b:14:49:75:e6:3b:f7:01:94:0d:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:2A:B0:40:22:CD:F5:DE:D0:BA:40:CB:67:1D:31:61:85:BD:A7
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:ed:4f:05:11:b2:ab:35:0b:3b:ee:eb:14:4d:d2:6d:06:
a2:33:38:6a:95:aa:b6:99:d0:f0:ec:f6:a2:78:fd:1d:e3:20:
40:98:72:3c:aa:15:de:33:c9:22:db:b5:25:b9:ca:89:37:e2:
d8:eb:89:46:09:73:43:34:3d:cd:7e:c0:dc:d2:19:b8:d0:a0:
36:01:d9:9e:11:38:51:2c:25:7a:d8:79:a1:67:c0:15:f5:db:
54:98:25:bf:ba:b2:a0:4d:7b:5b:1e:27:50:6e:74:14:99:37:
9c:31:b6:23:91:cd:84:78:df:97:89:c1:5c:bf:1e:dd:88:fe:
40:0d:03:0a:28:7f:f3:b5:e3:2e:36:c5:37:bc:dc:48:62:78:
19:3b:ff:11:51:03:0f:ae:4a:ee:cd:c7:b2:44:ac:b9:3d:33:
db:00:fa:73:6e:2f:f9:5e:50:e6:38:f0:47:27:74:15:52:4c:
b6:71:77:07:6e:6c:a0:a8:96:a3:42:f5:0f:16:d9:c2:cb:e5:
8d:ef:2c:f0:24:fd:a7:e2:44:b3:58:6f:c2:12:1d:d5:81:c8:
d4:67:a3:e5:e7:2a:7e:33:4b:88:4d:fa:f6:ba:2d:3f:f5:87:
c5:f1:e0:76:55:31:9f:42:40:e1:0a:c4:96:5b:dd:be:6c:78:
7a:f6:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:35 2025 by rpki-client