Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: PkDAmCeldjkAY8q8GO6R2NDRJMtXDM6Lea2MJW434rQ=
Subject key identifier: 92:2A:C4:DD:27:98:4C:D3:2F:4F:0F:B0:51:D8:9A:0F:7E:52:00:99
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019840993B5013EF877DE5D54F94771A939C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 1600
Signing time: Fri 25 Jul 2025 08:00:40 +0000
Manifest this update: Fri 25 Jul 2025 08:00:40 +0000
Manifest next update: Sat 26 Jul 2025 08:00:40 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: zdOGVK8zMzJZCTw0WkzXfx1Guj951/AqqmSuY31vA0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:99:3b:50:13:ef:87:7d:e5:d5:4f:94:77:1a:93:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Jul 25 08:00:40 2025 GMT
Not After : Jul 26 08:00:40 2025 GMT
Subject: CN=922ac4dd27984cd32f4f0fb051d89a0f7e520099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:b9:99:a1:8d:89:37:57:13:d9:8a:6c:7e:
f8:b5:19:30:e1:42:a9:d5:12:a6:08:9a:78:bb:ea:
c3:dc:e0:14:cf:36:53:98:68:a9:fd:3c:f0:d3:85:
13:fd:83:87:00:d7:56:da:53:8f:f6:91:30:d0:e1:
47:8e:0f:f3:f5:05:00:62:45:f0:98:c4:85:4e:e0:
d5:8d:a2:db:71:94:31:b1:d9:92:d5:25:eb:86:a4:
03:a6:fa:50:6b:c4:63:f8:54:2f:bc:e3:25:cf:3e:
13:03:e8:fa:a1:ff:24:5e:0e:98:47:33:6d:c1:13:
bb:4c:ea:92:31:a0:48:0c:7f:d0:3a:6c:0f:6d:31:
81:a2:c8:31:a4:68:85:19:7a:3a:f5:02:96:8b:ff:
2b:44:45:d4:eb:1c:3b:c6:0a:41:83:c9:f6:ad:f3:
45:74:84:97:8c:6f:07:35:25:29:d4:e9:7d:d0:2a:
69:26:8d:a1:9b:10:3c:c5:82:49:e9:38:95:d4:da:
b4:c4:de:61:5e:4a:cb:d3:19:b1:01:a1:97:50:14:
14:da:65:66:7d:94:90:f7:ee:01:f0:9e:59:01:86:
96:87:a7:82:31:db:22:0a:29:2f:04:60:de:2b:f0:
b1:25:c1:03:26:89:57:bf:bf:dc:d7:bc:fa:f0:59:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:C4:DD:27:98:4C:D3:2F:4F:0F:B0:51:D8:9A:0F:7E:52:00:99
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:09:b6:33:11:d4:d0:1b:7f:d7:9c:3f:1c:6c:0d:37:38:76:
d4:af:6f:76:57:27:f8:a7:2f:d1:7f:b7:27:56:2c:44:29:72:
50:24:d4:f9:0c:09:77:91:a6:ef:3b:b4:7e:1f:52:08:82:4a:
fa:e0:15:f8:0d:83:95:77:e5:a1:70:9c:74:fd:73:a7:09:8d:
0c:b6:37:3f:b6:8b:20:e0:7c:1d:cc:96:ad:17:61:98:d1:6a:
34:6c:5b:0c:7e:0c:68:fc:3e:f1:01:c4:b3:c8:9a:48:60:bd:
39:00:7d:71:90:72:61:8c:4c:68:da:e8:4c:ed:1a:57:46:08:
d5:52:93:73:56:cc:e8:db:f7:5a:26:eb:7b:76:d0:28:3f:1c:
62:f2:db:9f:0b:d5:4b:d6:b5:ab:73:c1:24:4c:ee:f6:f4:f6:
f7:df:06:e1:45:76:b2:9f:08:1f:66:41:76:16:15:a4:da:b6:
6b:80:50:97:2c:1e:e4:63:bb:b9:6b:5e:b4:ef:76:ca:00:51:
95:93:07:2b:8b:c6:f7:20:92:ed:7a:7c:c2:74:75:a6:98:8b:
eb:0a:bd:e1:0b:3a:82:64:7f:c1:0b:ba:5e:88:fa:dd:c0:16:
b8:64:1d:fd:e9:47:ac:ba:15:8a:80:04:7c:e3:bf:dc:66:2a:
58:97:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:11 2025 by rpki-client