Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: 8ox+rC8oKabrTUdRaS5oxoF3mHBt0NdoBRLs/Q+qLk8=
Subject key identifier: 9A:A1:D9:BC:C6:84:46:B0:CF:41:05:5C:CB:AE:AE:92:16:E6:63:C9
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 0198462D9C4F3E2DBD255868F28F55873EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 08CE
Signing time: Sat 26 Jul 2025 10:00:50 +0000
Manifest this update: Sat 26 Jul 2025 10:00:50 +0000
Manifest next update: Sun 27 Jul 2025 10:00:50 +0000
Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: n0aQzp8l+XbL1CNI+erTi27V6WG8VkcoBqiYkdlxBNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:9c:4f:3e:2d:bd:25:58:68:f2:8f:55:87:3e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Jul 26 10:00:50 2025 GMT
Not After : Jul 27 10:00:50 2025 GMT
Subject: CN=9aa1d9bcc68446b0cf41055ccbaeae9216e663c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:b7:50:94:cf:86:0e:55:15:90:97:a9:b0:
f8:41:1a:f6:df:c6:a5:12:8e:b2:ad:01:6c:82:af:
72:b6:19:01:b0:04:6d:63:e4:b2:ed:d6:5d:93:e9:
4c:9d:8d:20:43:65:21:11:6e:53:44:60:c5:5a:54:
ed:eb:86:6d:ef:c1:1d:e6:81:02:81:07:76:b1:7b:
83:44:6d:f2:a1:cc:11:27:b3:f9:e4:41:1f:90:00:
de:da:6a:e3:a7:37:10:4b:fb:55:89:96:6a:ce:d1:
4a:b3:a1:49:45:e6:84:45:90:f5:1e:b2:cb:34:db:
a4:4a:c7:20:ff:27:f6:9f:f6:8a:63:57:91:10:17:
c0:69:3f:8a:2b:d0:32:11:67:fb:dd:30:78:c8:51:
ba:b0:4a:6d:0b:bd:35:0f:86:52:f9:f5:a3:d8:02:
44:80:7b:d2:03:0a:70:27:c2:97:0b:20:6e:6f:ad:
25:7c:e8:0b:e0:9b:64:71:60:87:bb:39:df:70:d9:
02:7d:c1:2d:62:5a:97:a9:60:bd:57:a1:2a:28:d9:
a4:a9:d0:32:4a:3b:48:4c:3e:48:36:83:fe:dc:d8:
73:cd:e7:21:2f:42:3b:4c:f7:b0:ca:ad:4d:db:b8:
ec:53:09:1c:3a:8f:45:c1:a6:21:3e:f9:d0:b3:c5:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:D9:BC:C6:84:46:B0:CF:41:05:5C:CB:AE:AE:92:16:E6:63:C9
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ce:3d:3e:62:8b:7a:28:6d:0b:40:b8:92:d9:58:dc:a2:ff:
2f:d6:2d:90:8a:50:31:1b:40:4b:de:e8:d5:e2:6f:a3:9f:37:
97:da:eb:9a:44:c2:a2:97:b2:e9:0c:0d:5e:f4:6a:b8:b2:85:
2b:26:7d:e4:1d:5a:24:0b:08:d8:b4:cd:e1:11:b0:8e:92:58:
29:fa:10:d9:3d:2b:50:72:f6:c1:90:23:bb:9f:44:75:35:3e:
be:80:d9:92:f2:65:50:fc:4f:f8:35:6a:d1:05:22:8d:e9:13:
45:d2:f0:91:3e:cd:c5:fc:24:d9:94:d3:47:99:58:64:68:92:
3b:9c:4f:26:a7:4b:a0:cd:2c:c9:ab:9d:dd:5f:f0:fe:91:d8:
56:39:22:c8:c1:30:ea:1a:e7:85:13:61:18:ec:c4:19:f5:38:
84:d5:0a:34:5d:2b:dd:f6:b1:f2:0b:4f:c9:22:58:52:ae:65:
67:77:a4:ea:63:89:6b:3c:70:d4:ec:a6:54:5b:26:cc:88:4f:
b7:2e:57:c9:45:e1:d5:7f:49:26:41:97:40:19:57:9a:0a:b6:
33:3e:38:2e:26:78:3a:06:49:4d:7c:d6:66:f4:f3:a2:79:16:
de:e6:ef:c7:73:bf:4a:4d:be:7d:40:85:97:51:c6:bc:47:71:
39:70:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:27:27 2025 by rpki-client