Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: /ootrTqi+/EIwDmWM5IhDq5I0paPjSKppf066QZSqQY=
Subject key identifier: EF:53:A7:38:C6:2F:A8:A7:86:95:4A:7D:86:38:35:58:B4:99:30:B1
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 019849D3033CD802AB8BDC673F5C0A97FE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 0171
Signing time: Sun 27 Jul 2025 03:00:22 +0000
Manifest this update: Sun 27 Jul 2025 03:00:22 +0000
Manifest next update: Mon 28 Jul 2025 03:00:22 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: 1l3PPsSuvFCB27DszjHFqOUbmRrsWLvRnjdDylbZ8dA=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:03:3c:d8:02:ab:8b:dc:67:3f:5c:0a:97:fe:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Jul 27 03:00:22 2025 GMT
Not After : Jul 28 03:00:22 2025 GMT
Subject: CN=ef53a738c62fa8a786954a7d86383558b49930b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:4d:44:57:cb:61:77:47:42:6c:3b:f7:f4:
dc:cf:6e:bc:c2:8f:2a:90:5e:99:8b:fe:72:3f:a6:
0d:5d:47:7a:3f:4e:86:70:b1:c9:db:8f:fd:13:70:
a5:61:83:c8:25:8f:dc:08:a3:97:f6:8c:94:4a:6a:
c4:8b:dd:e2:8e:b1:8b:f4:9a:6e:58:52:a8:84:13:
59:19:cf:7b:a3:be:4b:37:c1:74:3e:a2:aa:be:ab:
3b:b8:be:6d:9d:39:41:b7:50:e4:e2:f2:7f:6f:1a:
c6:85:d4:e9:6d:f6:94:9f:dd:ca:98:4f:b2:d2:5f:
7f:83:3b:55:7b:c1:3b:2a:03:1a:fa:64:8c:a1:ec:
6a:4c:34:08:05:43:08:11:3a:fe:fb:f3:40:5e:96:
c8:e1:17:8c:f4:a6:1f:29:90:c4:ed:3c:53:1f:d0:
03:37:38:af:31:9a:be:72:c9:23:77:11:3d:e4:50:
7d:81:fd:e4:29:b6:fd:59:8b:4d:d7:0f:4d:59:1b:
0e:d2:81:51:e2:05:6e:ea:e9:33:a6:81:d0:bb:54:
5f:7a:a2:0e:04:8b:ec:65:53:25:0d:8c:dd:88:9d:
df:68:3e:bf:6f:81:0b:c1:96:98:66:59:d1:b7:08:
14:b5:b3:34:70:81:14:6a:fa:2c:f8:0d:df:1a:fc:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:53:A7:38:C6:2F:A8:A7:86:95:4A:7D:86:38:35:58:B4:99:30:B1
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:c6:51:36:18:db:74:4a:3f:92:b6:1e:59:b2:f6:12:7c:
13:98:1a:9f:50:89:f5:ae:31:81:09:7f:6f:47:97:59:f9:62:
cd:ee:5a:5a:4f:8a:58:7b:5a:e7:0f:c6:2f:ba:c9:31:4f:af:
dd:82:ff:d3:f9:65:34:dd:b2:91:f2:d6:10:c2:90:e9:b1:14:
11:ee:2c:c2:29:2e:11:11:e2:ee:27:0e:cf:19:28:dd:47:d3:
f2:fe:59:30:20:6f:56:7d:03:7f:19:71:27:0d:9d:cb:24:4a:
95:ec:42:2c:d5:a1:5a:a0:89:09:eb:b0:b5:0b:8d:a4:31:b2:
b4:97:c4:05:80:b0:58:b5:30:35:66:f5:4f:4a:66:d3:36:da:
cf:d5:b6:30:77:6e:2d:e8:92:ee:56:2d:b2:15:cd:e6:f4:7e:
0d:5b:bd:77:72:d0:8d:63:79:44:3f:94:19:99:f5:6c:c8:0f:
f3:e1:20:72:b3:94:b4:cb:0f:06:aa:d3:5b:7a:02:f1:f3:7a:
48:c1:fd:ee:e5:a4:39:5c:7b:62:76:bb:81:50:ea:be:e2:53:
98:db:40:4e:68:8e:b9:38:0e:1b:6f:d7:3a:47:6e:b0:b1:49:
4c:c5:23:0f:63:76:49:6e:45:b1:1c:85:2c:c3:99:f5:46:cd:
31:72:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:57:37 2025 by rpki-client