Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: emAh+NgbKNdgqM7qF7FgOdy+zE5DqFWNwFAtzOo5AUU=
Subject key identifier: 31:A3:3F:F8:D3:AD:14:46:B8:E5:62:21:28:D5:84:CF:46:B7:93:0B
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 01984D7896D0CE02F7BEC6645CF57D4551D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 14F4
Signing time: Sun 27 Jul 2025 20:00:05 +0000
Manifest this update: Sun 27 Jul 2025 20:00:05 +0000
Manifest next update: Mon 28 Jul 2025 20:00:05 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: 0OW4xNc6NacWSBnIA4FQCdiZXti2tyGATvdq0wiUm64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:78:96:d0:ce:02:f7:be:c6:64:5c:f5:7d:45:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Jul 27 20:00:05 2025 GMT
Not After : Jul 28 20:00:05 2025 GMT
Subject: CN=31a33ff8d3ad1446b8e5622128d584cf46b7930b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:a8:2b:06:f2:7d:43:81:16:ef:26:36:b5:
dc:69:cf:4e:3c:38:b0:cf:fd:4e:bd:e8:84:a2:ec:
67:ca:ba:3a:2e:b9:99:e1:75:01:ed:b1:a1:79:e8:
33:d3:42:ab:5e:d1:0b:b7:94:0c:07:93:30:55:72:
9f:16:d5:02:2c:90:b4:68:e0:07:42:af:ca:6d:29:
db:0e:8f:ee:ea:4e:5e:8c:5d:a3:17:ca:e3:e4:e6:
de:f9:61:8e:04:88:03:ca:df:ba:5e:5f:03:49:9d:
d1:d6:ca:94:92:dc:41:4a:da:72:60:77:48:cf:fb:
72:05:45:3d:07:d5:65:a7:66:41:2e:36:f3:46:03:
5f:c7:55:34:93:d6:25:4d:51:b0:7c:6f:e0:40:45:
2f:a7:bf:73:54:10:49:27:90:53:b3:1b:d5:0e:ab:
00:cf:db:20:fc:5c:4e:da:16:f3:1c:9f:c3:97:b5:
81:9c:c5:e3:9b:00:7c:01:2d:17:f7:25:5e:4f:aa:
e5:31:42:a1:87:e8:6a:94:49:c6:81:76:58:07:43:
62:d4:d1:d5:d9:04:59:62:6b:5a:4c:f2:89:60:6b:
49:f1:e5:9e:43:71:7b:d8:b7:7b:f4:93:26:fa:51:
c2:9b:c0:83:21:8c:9c:3a:72:56:72:16:bf:76:03:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:3F:F8:D3:AD:14:46:B8:E5:62:21:28:D5:84:CF:46:B7:93:0B
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:4c:b0:8d:52:fc:a0:2a:d8:aa:b5:d7:ec:64:bd:30:ba:
09:62:9c:61:cb:97:28:16:7b:a2:fe:97:d8:50:09:fc:e3:aa:
2a:f7:3b:26:55:ba:d3:b7:af:c4:7e:cc:20:59:41:fb:df:ec:
76:a9:99:cf:e1:f2:4e:d6:2e:2d:29:e1:32:bb:07:c1:e4:a6:
90:c7:d7:4c:b3:9e:80:01:ad:c4:75:e2:24:b1:95:6c:8a:57:
f6:38:49:76:1f:71:c9:b4:75:55:68:27:e3:74:17:6b:18:7c:
32:1f:ba:79:8f:1c:ee:27:a6:82:0d:eb:73:e9:36:e9:d8:ec:
e0:e3:99:a7:26:25:8b:2c:54:de:72:17:8f:bf:c6:ac:ac:4e:
f8:fe:17:2f:11:a4:0f:b0:70:78:80:b0:9a:14:a8:10:9b:ad:
0d:57:fd:d4:70:21:e5:52:5c:22:1d:e5:67:f9:97:9c:c0:7b:
a9:78:82:e4:d0:b0:c3:90:67:81:d0:40:71:51:69:98:e5:d1:
a1:ca:9a:7d:a2:51:1b:c7:07:6c:66:f7:b4:f2:76:19:ea:45:
d7:de:39:bc:52:27:c5:53:56:83:b0:8c:db:2c:01:0d:77:f1:
75:3e:59:70:2e:fd:2f:0e:92:22:b0:f6:ff:de:ab:e4:af:17:
d0:d7:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:40:42 2025 by rpki-client