Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: jz69O0fMGxdmxfyYTXHwGXo0byLAw/UY0AYxt6XCvTY=
Subject key identifier: D9:7D:7F:02:52:65:38:48:32:39:F0:16:CD:AF:23:BA:B5:2F:90:DE
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 0198488958A0B122985C365F070630989BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 098A
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: 4PCxWISp+3qV5obYQ9S46aS7G4TM+dZAtrqc7RxiLJA=)
2: b9Hu80_829heeLvFjfJdJz5nCTc.roa (hash: j+SJeADqUhFu2qLu6938DWITw4JSWTcM1pVfvfeWeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:58:a0:b1:22:98:5c:36:5f:07:06:30:98:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=d97d7f02526538483239f016cdaf23bab52f90de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:c1:41:4d:b1:7e:f8:fe:86:78:4d:77:bb:
0e:c0:07:78:93:41:1c:c1:8b:03:fa:26:78:09:85:
e9:74:e3:a4:33:25:f7:2f:df:b1:c9:4f:4f:f6:f3:
a4:bc:79:6a:5d:6c:ae:fe:26:7c:88:2f:83:5e:cd:
ce:cc:be:18:05:56:96:2e:53:f2:e0:9e:3c:a0:d8:
af:1b:ee:df:fc:15:a9:a5:93:35:a1:7c:1e:71:92:
4a:5c:87:18:00:70:ca:a2:24:57:83:b9:9b:75:db:
34:fc:14:14:cd:26:7e:0f:f8:7c:93:07:cd:7a:b7:
25:94:e8:52:ba:d9:da:07:d4:c9:0f:ec:af:b2:36:
40:80:20:1d:de:64:69:f6:ee:fc:77:c0:74:4d:d5:
f0:9d:86:e3:39:67:f5:8e:9d:4f:12:21:07:24:8e:
41:17:21:e3:f9:40:41:b9:e6:54:64:86:45:eb:73:
f1:fb:f7:16:aa:fa:1c:fc:dc:55:49:88:3a:62:5a:
77:ac:c2:38:82:6d:c1:4e:f6:cd:9d:89:93:bc:07:
16:b8:d6:ff:0c:46:0d:8a:e1:24:09:a3:15:a0:43:
83:f4:5e:eb:12:14:7a:16:7a:26:9a:78:67:d9:bf:
d1:5e:34:44:31:50:ff:f4:78:af:28:2c:e5:39:3d:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:7F:02:52:65:38:48:32:39:F0:16:CD:AF:23:BA:B5:2F:90:DE
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2a:c2:05:20:67:c3:ae:f5:a9:93:16:1b:ef:7e:79:c4:b6:
db:93:15:7d:30:0d:a4:4f:5a:8c:1f:79:3e:91:31:ad:93:71:
66:65:50:46:ba:a4:38:0a:c9:9a:8f:8d:d2:44:1c:fb:7c:61:
f0:9e:7a:3b:3e:c7:49:17:e4:f7:61:dd:b4:3d:64:91:08:52:
d3:66:ac:9b:4d:91:ac:5e:e3:04:f3:33:ec:fa:06:e9:a7:5c:
74:26:d3:06:e1:a5:31:98:c3:65:5f:16:6f:c1:ce:65:2a:63:
80:0a:be:ee:26:bd:6a:4a:9a:9e:55:39:f1:d5:7c:b5:f3:bd:
ee:67:e9:ea:46:2c:5e:b3:a0:98:d3:1a:31:8c:ef:0a:02:93:
0c:f7:d9:80:08:92:2a:a5:58:9a:74:03:fc:a8:89:41:1a:d1:
90:83:c1:d4:01:f5:5c:7a:0d:8b:f4:d0:d0:fe:c7:69:b8:8b:
6d:6d:7b:94:41:49:eb:7a:34:41:29:27:67:b5:3a:5f:85:8e:
a1:f9:31:75:d9:97:79:35:34:6d:21:a6:58:1d:2e:e9:9f:17:
18:e0:be:97:3e:f5:c0:60:bd:22:3d:f6:3f:27:21:92:6a:dd:
ff:88:ea:84:55:92:72:ed:c2:54:fd:d7:e9:1d:40:14:5c:58:
db:c5:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:06 2025 by rpki-client