Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: U+J+HVSTKaB6MO8A1rDx3t3zaIcxKcXU7G1FVlpKUIs=
Subject key identifier: 60:85:6F:53:13:0B:51:74:F8:F9:27:A5:EC:8D:FA:A8:73:A0:25:6D
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 01984A77907FE49CCE986C9FAB043E6F7159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1263
Signing time: Sun 27 Jul 2025 06:00:06 +0000
Manifest this update: Sun 27 Jul 2025 06:00:06 +0000
Manifest next update: Mon 28 Jul 2025 06:00:06 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: FfwV4bDDQSiSoaIUkjMNqJ+9OmwIvpo/vvai8IG4aKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:90:7f:e4:9c:ce:98:6c:9f:ab:04:3e:6f:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jul 27 06:00:06 2025 GMT
Not After : Jul 28 06:00:06 2025 GMT
Subject: CN=60856f53130b5174f8f927a5ec8dfaa873a0256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:28:2c:f5:67:4c:b9:90:b9:f6:9a:05:7b:
f8:e8:9a:48:ef:27:dc:77:7d:2c:d7:06:8f:d8:cb:
98:eb:ff:ef:fd:61:c7:dc:bb:65:eb:b2:2c:a9:b7:
56:68:7d:4c:96:f5:0f:e4:5d:e1:b6:a9:7c:6b:73:
b7:bd:09:66:2e:a7:a5:06:c6:a3:38:04:9a:e2:68:
46:ca:f7:ac:66:57:68:2c:eb:16:3d:d7:8e:65:60:
fe:25:7e:d2:7a:c6:7d:2e:a0:aa:30:c2:57:47:08:
3b:e0:e8:ca:9f:21:06:06:48:0a:b9:54:65:ba:09:
80:d4:2d:4e:6c:2c:c1:5e:8f:05:e4:14:01:9f:d3:
a7:56:a0:cb:cd:97:dc:c8:3d:e6:e3:e0:23:72:81:
0a:72:75:9a:5a:0a:8c:12:67:b9:3c:a6:50:8d:f1:
f0:25:35:44:bb:6e:29:6f:4a:66:fe:d4:e0:0b:40:
3b:27:0d:fc:1e:f3:3d:4e:e5:7b:a9:37:7b:ba:c5:
46:7b:cc:48:6d:c0:ba:79:06:11:43:09:82:ca:61:
22:c6:76:af:2c:35:14:6f:b6:03:d9:e6:eb:6c:7f:
c3:bc:51:a8:a1:f5:78:8b:41:41:19:93:c9:5a:5c:
8d:a8:a0:24:e3:41:06:a9:94:86:16:5b:85:40:3a:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:6F:53:13:0B:51:74:F8:F9:27:A5:EC:8D:FA:A8:73:A0:25:6D
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:3e:f2:9f:48:c6:85:61:1a:3b:2a:cd:0e:fa:34:a1:43:
ec:4d:41:55:39:9a:60:82:98:1c:12:16:b8:8b:9f:cb:4f:5f:
05:02:12:6e:38:87:77:c7:65:33:f4:dc:da:d6:af:98:06:6b:
17:aa:a1:5f:b3:b8:4f:1a:02:f3:68:12:29:4e:44:24:dc:ef:
50:57:58:e9:0b:6e:48:60:3b:30:bc:58:69:76:f4:38:ec:2e:
fa:7f:87:8a:4a:49:30:dd:69:63:ab:dd:76:4b:e1:c6:a4:55:
7d:e1:44:0c:4a:ec:d4:07:9b:66:84:f9:5f:76:30:21:4a:e4:
09:2e:78:ad:ef:90:e8:64:1e:3f:8e:da:b4:8d:d0:36:75:2d:
f9:f4:38:51:ef:9f:cf:32:04:a3:58:08:37:1d:cc:03:dd:e2:
fa:3e:e0:86:c6:46:96:56:55:4f:a6:ca:06:87:cd:5b:69:3c:
35:51:b3:9d:1b:0c:85:68:02:08:28:69:60:ae:26:a1:83:50:
c4:6d:e5:02:7c:d2:17:9a:28:9f:6c:e1:96:54:d0:33:0a:75:
b8:20:b8:1c:59:34:a1:48:e8:88:23:c0:9c:2d:1d:5e:b9:c5:
59:d1:cf:96:ce:f7:4d:f9:b3:a2:95:0c:cd:83:f9:e5:ba:7a:
85:57:7c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd5B/5JzOmGyfqwQ+b3FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjUwNzI3MDYwMDA2WhcNMjUwNzI4MDYwMDA2WjAzMTEwLwYDVQQD
Eyg2MDg1NmY1MzEzMGI1MTc0ZjhmOTI3YTVlYzhkZmFhODczYTAyNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8MoLPVnTLmQufaaBXv46JpI7yfc
d30s1waP2MuY6//v/WHH3Ltl67IsqbdWaH1MlvUP5F3htql8a3O3vQlmLqelBsaj
OASa4mhGyvesZldoLOsWPdeOZWD+JX7SesZ9LqCqMMJXRwg74OjKnyEGBkgKuVRl
ugmA1C1ObCzBXo8F5BQBn9OnVqDLzZfcyD3m4+AjcoEKcnWaWgqMEme5PKZQjfHw
JTVEu24pb0pm/tTgC0A7Jw38HvM9TuV7qTd7usVGe8xIbcC6eQYRQwmCymEixnav
LDUUb7YD2ebrbH/DvFGoofV4i0FBGZPJWlyNqKAk40EGqZSGFluFQDoX+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCFb1MTC1F0+PknpeyN+qhzoCVtMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjN0+8p9I
xoVhGjsqzQ76NKFD7E1BVTmaYIKYHBIWuIufy09fBQISbjiHd8dlM/Tc2tavmAZr
F6qhX7O4TxoC82gSKU5EJNzvUFdY6QtuSGA7MLxYaXb0OOwu+n+HikpJMN1pY6vd
dkvhxqRVfeFEDErs1AebZoT5X3YwIUrkCS54re+Q6GQeP47atI3QNnUt+fQ4Ue+f
zzIEo1gINx3MA93i+j7ghsZGllZVT6bKBofNW2k8NVGznRsMhWgCCChpYK4moYNQ
xG3lAnzSF5oon2zhllTQMwp1uCC4HFk0oUjoiCPAnC0dXrnFWdHPls73TfmzopUM
zYP55bp6hVd8CA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:58 2025 by rpki-client