Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: L+TYHmxMjA1VugzFZehwgUyceOwRBUmoWAlvyaJAouY=
Subject key identifier: 0F:18:1B:3C:35:09:45:A4:4C:8F:63:AF:B7:87:DB:4A:28:BB:BA:D6
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01984C2F28289F989574734AED1F556DF81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 14:00:15 +0000
Manifest this update: Sun 27 Jul 2025 14:00:15 +0000
Manifest next update: Mon 28 Jul 2025 14:00:15 +0000
Files and hashes: 1: 60je5SoeoIIvExp08AfHAba81Gg.roa (hash: OYL+m6W/OD3kcGFXK2Ewor0X0LhaICB75RQGsXvyc9g=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: Lm3v5hv9URri2LdmdrIWrhlNER6rK19B4/4ZqvvhRog=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:28:28:9f:98:95:74:73:4a:ed:1f:55:6d:f8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jul 27 14:00:15 2025 GMT
Not After : Jul 28 14:00:15 2025 GMT
Subject: CN=0f181b3c350945a44c8f63afb787db4a28bbbad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:3c:e4:ac:55:97:45:60:64:f9:8b:89:13:
f9:27:09:72:0f:ff:4c:48:d7:57:f0:0b:23:18:e8:
af:ad:28:4d:46:af:9e:c9:a6:cd:af:3d:f5:7c:3c:
5c:cd:ae:a3:b2:3f:30:91:ff:ef:0f:2c:f7:77:9d:
7a:79:ba:e5:3c:de:ee:66:ec:ff:1d:1e:28:50:6e:
b3:e5:0a:20:f4:5d:23:6c:0b:94:4f:1c:46:ee:85:
73:7d:ea:60:ec:31:95:16:a7:ad:0b:51:51:40:cb:
4b:c4:ac:ee:40:b7:0e:0b:d8:ff:64:6e:58:f1:10:
e1:73:18:eb:a4:40:b9:39:25:d9:21:1e:2c:93:72:
2c:fa:b2:0e:9d:ce:e1:d1:3d:ce:15:36:d7:ca:ba:
e3:1b:44:72:ff:32:34:e3:b2:f5:2e:ee:be:8e:10:
4c:17:ae:14:b5:90:ce:54:32:4e:d8:f6:ba:48:2f:
7f:9b:db:d7:20:2d:21:d5:c6:e0:15:62:4a:b1:49:
a4:71:5c:da:a9:ae:24:08:9f:e9:fa:18:e1:a8:43:
fc:10:ad:ab:da:92:04:77:67:a2:13:4a:f8:67:ec:
d9:28:14:26:cf:ad:8b:da:f8:a3:aa:09:3b:1e:67:
6d:d8:89:58:bc:67:f0:d8:88:7f:77:e1:f1:41:26:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:1B:3C:35:09:45:A4:4C:8F:63:AF:B7:87:DB:4A:28:BB:BA:D6
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:7b:a8:15:77:88:bd:fc:77:2f:e8:e3:18:07:18:58:74:
0c:48:2f:fc:e6:a0:64:7c:28:b2:14:3a:99:62:47:4e:5a:d0:
4c:6f:67:31:51:2e:d0:d3:48:97:98:33:07:7c:14:3a:83:c2:
10:16:9d:e7:1f:37:cc:5c:5b:2f:f6:7b:3b:d8:ef:87:e8:7c:
3b:18:6f:f9:b0:f3:ab:40:39:d0:bf:f7:56:08:10:82:02:f7:
64:82:07:fa:2f:fd:36:b8:95:dd:d5:ff:41:f2:d6:56:ad:da:
b6:92:60:2c:3d:d6:ea:0d:b9:fb:8c:69:c4:34:db:3b:0a:01:
93:69:cf:bb:18:2e:29:5f:67:d3:f2:b4:ce:e7:1e:a8:55:09:
67:2b:d2:7d:6f:8a:6b:7e:6c:d8:3e:51:74:e5:c4:2a:5c:38:
36:34:13:d7:f0:64:22:4d:d8:c0:fd:35:fa:b5:05:6d:9f:bf:
fa:94:fc:0e:39:8a:02:dc:0c:a7:00:a2:ab:b5:ba:2c:a6:ce:
20:f4:aa:a4:68:fe:2e:32:48:3f:a9:04:28:c6:17:7a:7f:0b:
23:03:23:9c:19:85:69:3e:fb:e9:88:a9:66:67:fe:a2:58:f0:
9d:ce:4a:84:c1:94:39:71:a2:5e:f2:20:83:8a:38:be:72:14:
af:34:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:00:04 2025 by rpki-client