Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier: sxbPyMKPMxmkUnpm+TfFqHeeGpWz9F/Xl+wPzEIRPt4=
Subject key identifier: F4:D3:4C:60:2C:F5:7E:D2:28:4E:F3:E1:02:56:94:AC:05:69:FA:C1
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 0198428786E3B346C1779FB4676AD362A07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number: 043E
Signing time: Fri 25 Jul 2025 17:00:34 +0000
Manifest this update: Fri 25 Jul 2025 17:00:34 +0000
Manifest next update: Sat 26 Jul 2025 17:00:34 +0000
Files and hashes: 1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: TaWZ3W0gyp7RJgXCWWL2kCzVg8q3Xno+uAZ/8BghHiM=)
4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:86:e3:b3:46:c1:77:9f:b4:67:6a:d3:62:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Jul 25 17:00:34 2025 GMT
Not After : Jul 26 17:00:34 2025 GMT
Subject: CN=f4d34c602cf57ed2284ef3e1025694ac0569fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:7f:c8:5c:75:37:23:32:a1:cd:07:b9:da:
a9:ca:3a:8c:20:a1:ba:88:29:13:2d:45:0e:4a:20:
87:ab:9d:3c:3d:4b:85:b0:27:ab:c3:f7:3f:34:c1:
0b:a6:40:36:6c:67:4b:a9:e4:81:40:47:68:fa:d2:
22:d0:94:36:be:2c:32:ef:0d:24:f2:c5:24:b9:00:
ba:d1:e7:79:9e:79:4d:ba:6d:c4:5f:fe:5c:22:92:
55:03:f9:4e:46:d1:bd:b9:99:35:6d:85:40:f1:18:
cf:ba:18:70:e8:a3:cc:81:32:55:ba:74:6f:96:cf:
b7:4a:cd:30:af:f0:46:ab:a4:0f:94:17:ed:8f:88:
8a:56:4a:fc:ac:ae:f6:e4:3a:95:48:0a:0a:59:2f:
f2:24:56:a4:e4:23:41:1c:9d:f5:df:f7:47:3a:6a:
64:cd:7f:f1:e9:a2:15:90:1b:f8:d0:69:ad:88:26:
bc:65:75:28:29:6a:85:25:70:d8:05:15:3a:e2:be:
6e:01:60:68:33:01:9d:0b:87:6b:53:a4:db:9f:39:
30:11:48:4f:d9:49:25:3d:02:0e:7f:ba:4d:3d:8d:
eb:34:c1:ba:3a:18:af:ee:c8:42:1f:d1:00:d5:ec:
55:18:01:bb:ec:e4:c9:40:6d:5a:f9:88:24:c4:42:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:4C:60:2C:F5:7E:D2:28:4E:F3:E1:02:56:94:AC:05:69:FA:C1
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:ff:b8:e5:63:f8:9c:91:33:de:6a:b7:cc:f5:68:fe:fe:
40:de:8f:36:23:1a:e3:26:1d:04:b0:87:13:4b:cb:e1:b2:8f:
2c:d4:86:d7:64:37:b1:de:97:63:7b:9a:5f:e6:2d:f9:3e:99:
04:65:a0:b8:cf:00:90:24:6c:b4:b9:fb:34:9a:a9:09:0b:22:
cd:0a:da:51:90:ab:76:1c:2f:f9:0e:c8:c6:ac:db:8c:ad:50:
06:80:07:b9:92:f2:fe:61:5f:5a:10:41:6a:c8:52:ab:3b:a5:
55:16:ef:c6:b1:eb:db:d2:71:37:4f:80:c8:ee:78:68:99:02:
c9:10:1f:23:65:bc:b8:83:e8:7c:58:80:fc:2f:94:67:1c:53:
48:fd:80:bc:5c:3c:ec:7d:bf:3b:eb:92:9f:9f:69:41:25:a5:
ab:9d:9c:f2:a8:8c:99:0e:e7:b4:5a:dc:37:3e:bd:54:73:0a:
9a:f4:61:a4:9f:85:b1:e1:48:50:1d:70:0e:10:6a:be:94:10:
63:b9:c3:b6:dc:b1:16:7d:48:2d:86:0e:ff:13:49:e2:d2:77:
c6:44:b7:77:de:be:7d:0e:1a:a4:bf:2a:7a:13:9a:ae:ae:25:
49:b6:a2:a0:30:29:13:85:ca:55:39:21:fb:96:c5:c1:9f:86:
8b:36:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:38 2025 by rpki-client