Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: PGTCBAZpA14HC5aeRIUKwcAF3p6dgbrpQcZQX+0vtnM=
Subject key identifier: 86:F5:1F:A0:0E:5F:8F:25:EE:39:FC:51:90:2C:DC:15:35:0A:D3:FA
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0198586B1541FB1746DC92FC6D887DCBDE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0E6F
Signing time: Tue 29 Jul 2025 23:01:09 +0000
Manifest this update: Tue 29 Jul 2025 23:01:09 +0000
Manifest next update: Wed 30 Jul 2025 23:01:09 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: 036L2UdlSqtayNsxXJoknXKQUOq40izwnvXyCL6NoJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6b:15:41:fb:17:46:dc:92:fc:6d:88:7d:cb:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jul 29 23:01:09 2025 GMT
Not After : Jul 30 23:01:09 2025 GMT
Subject: CN=86f51fa00e5f8f25ee39fc51902cdc15350ad3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:97:ab:70:b9:aa:18:61:9f:6a:74:2a:99:
83:fd:7c:4e:8d:15:54:1f:8f:11:07:de:01:80:b7:
4e:14:04:57:d8:9f:2a:eb:cc:c7:cd:ac:e6:ef:93:
7f:cd:51:e5:86:25:27:ed:7d:94:24:a6:d6:81:c3:
88:a4:82:7f:fa:6d:17:e6:14:4e:24:b4:7d:50:d3:
b4:95:bd:74:1e:21:53:bb:91:df:74:24:e5:09:f4:
d8:af:8d:69:08:17:6b:42:02:b4:14:26:96:d6:93:
03:af:db:cd:1d:d3:3e:e9:66:a6:39:c7:58:d8:7c:
30:78:60:5c:59:e4:cb:8f:1e:11:93:25:22:29:73:
df:8f:14:6b:fe:99:6a:e1:5e:ee:64:5a:98:21:c5:
10:85:1a:5c:07:ab:f3:55:8f:6a:c7:37:5c:41:af:
a0:a0:f0:34:91:27:8c:09:0b:cb:7f:65:58:d2:1a:
18:75:87:e7:41:28:d3:87:fc:3b:5a:e9:b9:cf:3e:
14:49:a3:87:c5:20:5b:54:ba:33:45:4e:5c:6b:78:
be:31:1e:12:a3:b7:69:27:7b:01:5f:d8:6f:0d:56:
5c:0b:9a:a0:66:8d:a3:96:a5:93:af:c1:3c:23:2f:
bb:75:a3:ca:8b:c6:d5:70:ea:a7:e0:61:b4:1b:8f:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:1F:A0:0E:5F:8F:25:EE:39:FC:51:90:2C:DC:15:35:0A:D3:FA
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:66:ed:54:b7:41:71:b9:c8:bb:e4:b1:48:08:3d:f0:ad:
c3:e1:5b:93:4b:bb:3a:c4:97:02:f7:16:4c:7b:df:d7:75:18:
1d:82:fc:8c:00:24:59:82:c9:1d:7c:59:53:c7:79:a7:e6:0f:
c6:e1:65:fd:09:bd:ff:c8:d9:7a:53:b2:c5:e1:15:b4:9e:12:
e2:69:d9:b3:c6:2a:32:b6:b5:22:c4:0e:2a:16:ba:a4:36:3c:
4f:39:47:6b:d4:f9:14:28:39:38:ba:fc:33:aa:eb:00:35:60:
5a:75:12:a3:fb:62:d2:39:a6:19:c3:b4:47:ba:96:8a:e0:42:
cf:66:9d:ab:01:3c:01:d6:b1:57:3b:c9:e3:cf:17:b4:5d:03:
2e:dc:42:5b:f4:a2:5e:9a:fd:94:c8:0c:ed:c0:16:b8:6d:8b:
a8:e1:51:4f:18:1b:de:7c:17:7f:08:27:ce:30:55:bd:7e:e4:
eb:8a:7a:20:70:26:92:67:13:19:70:6f:42:ad:46:3f:5e:f3:
fa:73:d7:5f:2a:bb:dc:ee:01:25:55:f0:99:b8:cf:44:67:07:
4a:34:eb:23:26:18:e6:2f:67:88:d8:65:ae:36:6c:f9:36:4c:
59:a2:a2:1f:96:a7:02:d2:dd:71:3f:7b:c4:b2:53:18:0f:91:
e0:bc:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:31:09 2025 by rpki-client