Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: cV/db1NKr6qFRcZcFDJIP9FobkQ/D9ltaHo3eHi6SI4=
Subject key identifier: 1A:71:69:48:98:A2:FA:AC:3D:F2:67:73:52:5E:8A:1B:4A:00:44:41
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 019848529475DE77607CAAEB43CEA7488A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 20:00:28 +0000
Manifest this update: Sat 26 Jul 2025 20:00:28 +0000
Manifest next update: Sun 27 Jul 2025 20:00:28 +0000
Files and hashes: 1: C-JYvDSVCc5Zd_4Sd7FiFR4ridU.roa (hash: Fud1edK7T1C6PqdOPqDnlVWq4JxXY+eiVXIDYHC1t50=)
2: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: 893KQhXSyQjcAYZj+H8TQ/lSUF+/2HW6pTSkeUWrMGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:94:75:de:77:60:7c:aa:eb:43:ce:a7:48:8a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jul 26 20:00:28 2025 GMT
Not After : Jul 27 20:00:28 2025 GMT
Subject: CN=1a71694898a2faac3df26773525e8a1b4a004441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:8f:ff:1c:ba:a9:38:94:77:d3:a7:55:fb:
a3:e6:97:db:cc:d0:be:1a:48:e8:31:3f:0b:11:4b:
41:0d:a7:a3:5e:68:bd:c5:f3:d7:9c:64:b7:c2:86:
12:1e:ec:5c:16:8c:fe:98:ee:99:b6:44:e4:2b:e2:
94:d7:44:a3:46:12:f2:d2:6a:c3:60:cd:88:31:0b:
bf:37:93:6e:44:a1:1c:7c:56:27:37:51:03:17:74:
d2:3e:86:42:d8:7f:50:df:ce:61:f4:3a:99:2d:d9:
51:34:c7:8f:20:1e:81:4b:6f:d1:b7:23:89:7f:4b:
e0:d6:ca:39:5c:eb:cd:6d:5c:9b:45:80:73:66:a3:
55:52:10:56:f5:a0:32:06:ad:aa:8d:a6:23:19:95:
a7:22:f2:3d:1a:42:27:c9:fc:2b:8a:07:ee:2d:2a:
32:79:32:a4:31:eb:ee:ee:b3:fd:ad:3f:74:d1:5a:
fc:72:59:d4:a8:36:49:7e:f3:ab:21:c4:78:97:f6:
d4:4e:b1:15:b7:8e:9d:a6:51:b0:75:33:69:ce:dd:
85:da:7d:7c:96:4b:96:7f:b5:73:d5:e2:c4:70:05:
27:35:97:61:20:c3:23:da:2f:a8:01:01:3b:b3:ab:
1e:68:82:3a:cc:7d:85:9a:86:0b:11:43:6a:ca:97:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:69:48:98:A2:FA:AC:3D:F2:67:73:52:5E:8A:1B:4A:00:44:41
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:12:c5:e1:25:5a:6a:65:17:12:d9:07:32:ce:9e:d9:2d:
ad:a5:1f:a2:2f:a2:90:0f:53:db:fd:3f:76:fc:c8:c4:d2:bf:
dc:4d:de:17:5d:b6:ee:64:3e:ff:4e:fc:89:b3:55:ab:99:5c:
93:9d:e9:1a:96:3a:74:13:49:bd:de:40:69:98:6c:68:87:1e:
71:9b:f2:c5:49:b3:21:b7:cc:ef:53:d6:fb:8a:d7:b5:1f:6c:
78:5e:a3:ad:0f:0a:d6:f0:d9:7f:23:57:db:43:15:0c:30:da:
1a:ac:9e:66:6c:80:c3:38:eb:7f:f9:5f:cc:f3:06:0e:d1:81:
4a:75:9a:2e:1d:07:32:7c:cd:1f:8e:5f:0c:1c:17:82:b8:a6:
5f:91:8f:e5:a9:91:7f:42:01:18:05:c8:49:e4:03:de:9f:e4:
11:2b:fd:49:6d:6d:31:da:4c:35:ce:95:9c:17:99:4f:b7:fa:
e7:2b:7c:76:57:ea:46:d5:f9:c7:81:7b:97:ab:49:32:e1:3f:
7b:8b:f9:ec:44:58:30:7d:2c:98:23:3e:c7:84:7b:d7:6d:05:
65:3b:ed:2d:2c:f7:7c:da:f4:0f:c6:66:97:1c:0f:5c:a3:98:
23:3a:8b:03:70:d0:ae:57:7b:a4:c6:79:17:44:42:2b:12:fc:
bc:5a:e5:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUpR13ndgfKrrQ86nSIqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODFkMWZmNDViMTU0N2MwMGE4NGI0NmVmOTllY2EyZGZi
ZDQ1YmMwHhcNMjUwNzI2MjAwMDI4WhcNMjUwNzI3MjAwMDI4WjAzMTEwLwYDVQQD
EygxYTcxNjk0ODk4YTJmYWFjM2RmMjY3NzM1MjVlOGExYjRhMDA0NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6aP/xy6qTiUd9OnVfuj5pfbzNC+
GkjoMT8LEUtBDaejXmi9xfPXnGS3woYSHuxcFoz+mO6ZtkTkK+KU10SjRhLy0mrD
YM2IMQu/N5NuRKEcfFYnN1EDF3TSPoZC2H9Q385h9DqZLdlRNMePIB6BS2/RtyOJ
f0vg1so5XOvNbVybRYBzZqNVUhBW9aAyBq2qjaYjGZWnIvI9GkInyfwrigfuLSoy
eTKkMevu7rP9rT900Vr8clnUqDZJfvOrIcR4l/bUTrEVt46dplGwdTNpzt2F2n18
lkuWf7Vz1eLEcAUnNZdhIMMj2i+oAQE7s6seaII6zH2FmoYLEUNqypcrnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpxaUiYovqsPfJnc1JeihtKAERBMB8GA1UdIwQY
MBaAFF2B0f9FsVR8AKhLRu+Z7KLfvUW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUt
ZWU4MGEyZDI5NTJkLzEvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUtZWU4MGEyZDI5NTJk
LzEvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbUSxeEl
WmplFxLZBzLOntktraUfoi+ikA9T2/0/dvzIxNK/3E3eF1227mQ+/078ibNVq5lc
k53pGpY6dBNJvd5AaZhsaIcecZvyxUmzIbfM71PW+4rXtR9seF6jrQ8K1vDZfyNX
20MVDDDaGqyeZmyAwzjrf/lfzPMGDtGBSnWaLh0HMnzNH45fDBwXgrimX5GP5amR
f0IBGAXISeQD3p/kESv9SW1tMdpMNc6VnBeZT7f65yt8dlfqRtX5x4F7l6tJMuE/
e4v57ERYMH0smCM+x4R7120FZTvtLSz3fNr0D8ZmlxwPXKOYIzqLA3DQrld7pMZ5
F0RCKxL8vFrlWw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:49 2025 by rpki-client