Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File: xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier: x/7fEO0MyUjHPYKn/cQE5rTX1x09iODena/UqGQdgfA=
Subject key identifier: 33:F1:9D:89:BF:48:AA:E2:66:9C:11:D5:4D:46:61:DF:95:9A:BA:A5
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 01984DB03E8015C3EF6A3A4EFFBD358F7247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 21:00:52 +0000
Manifest this update: Sun 27 Jul 2025 21:00:52 +0000
Manifest next update: Mon 28 Jul 2025 21:00:52 +0000
Files and hashes: 1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: dynUfMmP+INmAqnzEF59Gha1b+V8Um9/yX5ouWqD510=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:3e:80:15:c3:ef:6a:3a:4e:ff:bd:35:8f:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jul 27 21:00:52 2025 GMT
Not After : Jul 28 21:00:52 2025 GMT
Subject: CN=33f19d89bf48aae2669c11d54d4661df959abaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:b0:dd:80:02:bb:36:4e:9f:49:76:6e:1c:
be:15:54:0f:bc:86:b4:2c:c7:ed:8a:f0:cf:af:0d:
67:3d:34:5d:9e:44:08:1a:20:42:9f:9c:f6:54:55:
1a:96:20:ac:e7:aa:a1:9e:78:1a:ea:cc:5e:b6:71:
e1:56:db:25:69:8c:50:79:bc:36:b5:98:6c:33:f5:
84:89:c8:d7:c3:e7:22:c5:aa:84:07:69:4c:31:9b:
f4:7e:d7:6a:28:47:a8:ec:f6:2d:c4:31:f1:b2:d3:
ac:f4:d0:a5:90:30:74:a3:f0:8c:f4:09:60:c9:7a:
d1:37:a7:31:a1:0e:4d:8d:a7:6e:21:70:cc:4e:95:
6a:06:01:30:50:e6:c5:23:c1:9a:e6:1b:df:e7:a8:
95:5f:33:d0:c4:50:4f:54:d9:16:f4:46:d6:b1:4a:
00:cd:41:91:df:28:e5:54:af:e5:53:08:72:97:ee:
a8:43:04:ae:f4:8f:48:ed:48:1e:ff:50:0c:cf:b8:
75:6b:01:a5:b7:f9:82:55:ee:f5:38:02:b8:8a:4e:
83:60:7c:fd:5e:68:4a:e5:6d:b9:e5:8f:50:03:32:
f5:19:ad:bc:81:20:f7:42:8a:d6:28:80:ef:97:c9:
fe:5c:8c:c1:57:21:ca:10:e3:95:a3:36:2d:1d:78:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:9D:89:BF:48:AA:E2:66:9C:11:D5:4D:46:61:DF:95:9A:BA:A5
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:c1:f2:8c:82:e2:2d:6c:b8:05:8f:3c:ad:5c:bb:69:a6:
3b:3e:82:96:92:a4:b2:c1:e6:3f:39:a8:b9:ae:9f:66:00:e5:
f6:73:97:29:e8:82:32:5e:3d:38:86:3f:08:14:5a:35:01:42:
f5:a7:2d:4c:58:9d:58:58:5f:5e:a6:91:17:c9:29:41:55:24:
8f:15:0f:e9:79:35:45:2b:05:56:6f:1a:55:99:aa:f4:6b:aa:
23:a2:34:08:58:22:c0:52:07:bb:0a:6e:fc:2a:2c:48:72:70:
43:74:40:71:cd:78:a7:09:06:17:64:8a:6f:69:bf:80:7f:16:
7b:65:ad:ea:dc:67:8f:db:54:ba:74:6b:11:a7:7e:e2:6f:1e:
99:c2:e5:fd:d9:5c:c4:be:f5:ef:2c:50:e9:47:26:18:02:61:
b2:a5:70:c5:c9:65:a6:9c:74:9f:41:8d:5a:11:76:65:29:de:
84:17:bb:25:f6:da:40:9b:e7:a7:8d:11:cf:7d:4a:1e:96:a6:
f9:d0:52:c8:2b:08:67:f1:bf:38:7e:0b:d5:5e:fd:94:a0:03:
b9:27:27:bb:8e:ce:5c:ce:d6:e9:01:d1:76:ad:4c:d8:20:65:
d0:fc:ae:42:6b:e0:3e:1e:d2:72:fe:0a:b2:da:8d:72:43:45:
d2:8f:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:05:14 2025 by rpki-client