Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: XOaqazDK5KID6zc0Tlh+ciIFFcCF0NlpPPcztecl414=
Subject key identifier: 1D:39:72:59:49:D2:77:38:6C:F0:7A:73:11:FA:CE:18:7C:BA:59:03
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01984589A20E4C020F30093404A1E35FA661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 07:01:44 +0000
Manifest this update: Sat 26 Jul 2025 07:01:44 +0000
Manifest next update: Sun 27 Jul 2025 07:01:44 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: 3hUgbIU5rzoUY+7HZ4WcQOCHv7WOfj3MkOaVzhxyL/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:a2:0e:4c:02:0f:30:09:34:04:a1:e3:5f:a6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jul 26 07:01:44 2025 GMT
Not After : Jul 27 07:01:44 2025 GMT
Subject: CN=1d39725949d277386cf07a7311face187cba5903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:80:97:6b:45:92:7c:18:59:5b:13:44:54:
eb:52:4e:3a:40:cc:45:1d:ec:61:f0:4c:d0:ae:b2:
e0:47:e2:96:85:ce:8e:b0:a8:b1:b4:c4:72:3d:b7:
d2:61:cf:ce:ef:66:c3:a8:41:86:f8:94:2e:89:57:
ce:0f:5e:cb:f2:96:46:7b:6c:2a:00:9f:5c:1c:27:
61:0f:dd:20:bf:3b:7d:32:3d:f7:5a:0b:aa:36:d9:
13:ed:07:ba:fa:26:1a:28:56:ca:96:6a:0f:8f:2a:
72:f4:01:06:c3:27:9e:98:69:f0:b8:15:52:b6:4c:
40:0a:bb:bf:c8:8d:c8:fc:3a:66:e5:d4:ff:06:f9:
ca:ce:5b:71:8c:ee:ac:30:90:ff:29:b3:16:94:32:
b7:c5:50:20:71:5f:e4:e8:4b:5b:e8:06:c9:d7:2f:
9d:10:41:2b:a8:6e:f0:6f:ed:89:42:7a:57:c7:da:
8a:4b:b1:46:3e:e0:f5:86:90:e6:50:20:59:69:25:
48:75:6a:7a:ff:1c:f0:16:b9:7b:92:17:31:84:b7:
b7:9b:f5:e4:53:8d:35:da:0e:40:32:20:b9:f6:d9:
11:48:ca:f3:01:6f:ab:2e:a9:b5:b8:62:5b:a3:07:
59:17:ed:bd:b3:bd:bc:65:0a:d8:97:54:95:57:b2:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:72:59:49:D2:77:38:6C:F0:7A:73:11:FA:CE:18:7C:BA:59:03
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d6:be:26:80:5c:24:32:e3:a6:46:4f:c2:a2:af:0d:a6:b0:
14:20:c5:cc:68:45:46:4e:e2:5c:cb:d7:c6:11:c9:7e:19:7b:
f2:45:0f:cc:20:e1:66:63:72:27:83:aa:7a:78:c8:f5:56:cd:
a3:f9:f3:09:f9:b4:ab:1f:c2:36:96:3d:1d:b1:09:4a:fd:cf:
db:42:1b:82:02:d7:70:ce:83:3a:67:20:7d:21:d6:1a:da:aa:
ae:42:c1:bf:ff:4b:ce:90:b7:30:03:93:ef:c3:37:12:58:e5:
35:c4:72:36:84:bc:5d:09:58:0b:5b:6f:9c:00:19:cc:bf:d3:
95:93:7c:27:c4:17:ab:be:64:9d:04:c9:a6:a0:c9:ff:9c:87:
ff:39:af:ff:b9:95:59:f9:66:ce:01:2f:5c:33:d5:fe:ac:47:
cb:3b:9f:77:c2:71:85:5f:c7:39:9d:c4:b9:80:e2:dc:d2:1b:
47:1e:85:e8:a7:cd:8a:82:c5:42:f8:ca:68:61:bf:4a:e7:af:
84:eb:2d:17:77:15:bb:99:ff:70:b5:1e:f9:1a:5c:a2:d0:f4:
a8:4c:1b:f9:27:0f:54:e3:c9:8d:83:b1:05:68:9f:5f:04:64:
fb:6d:84:50:d0:0d:63:a2:97:82:6d:bc:9f:cc:25:51:5f:b0:
40:b6:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:07:30 2025 by rpki-client