Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: HrKJGOx0sSPpeRBruu98/VmxinoqXzTW7yRvdRl1284=
Subject key identifier: 0D:7A:5F:6F:0D:4E:7A:FF:03:99:88:5A:B3:4B:3F:F5:87:D0:1B:B2
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 01984A77EF33742E3C99A317566177D2FEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 06:00:30 +0000
Manifest this update: Sun 27 Jul 2025 06:00:30 +0000
Manifest next update: Mon 28 Jul 2025 06:00:30 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: 4vUJB5Fs2jfPR8+wwkFq0QRYeOCM+cEIoxE1t09xr58=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ef:33:74:2e:3c:99:a3:17:56:61:77:d2:fe:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jul 27 06:00:30 2025 GMT
Not After : Jul 28 06:00:30 2025 GMT
Subject: CN=0d7a5f6f0d4e7aff0399885ab34b3ff587d01bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:0e:77:94:03:75:3a:11:bd:58:87:3d:a9:
58:4f:c2:ee:a5:e3:a0:2f:b0:14:cf:56:d5:69:08:
dd:85:0f:cc:42:59:36:fb:ef:52:3c:92:9b:c6:06:
bb:b2:0f:20:39:6a:6e:1b:cc:1c:43:2e:14:25:6f:
b7:ac:45:b6:b2:79:10:d9:db:90:ca:af:69:69:e6:
47:91:07:3e:88:e6:32:fd:cb:9a:b8:ca:f6:d2:b8:
bd:a9:f5:e7:17:2c:d1:62:7d:db:4b:6a:f6:24:f1:
fd:09:c6:e0:12:be:0f:e2:06:d7:01:0b:1d:91:f2:
77:f5:eb:b8:39:2f:6e:13:e7:aa:d6:56:10:69:21:
eb:ae:cc:db:fa:5d:2f:dc:3a:05:c6:02:5e:3b:91:
80:9d:c0:2f:45:ab:0c:7e:ef:41:db:5a:cf:98:04:
db:4a:68:3a:82:f2:b6:2d:7d:09:46:20:f9:00:26:
0c:48:f9:6e:5a:12:57:da:25:2e:8c:40:dc:07:34:
74:0d:42:9e:a7:08:f9:45:5a:fe:75:0a:b4:e2:4c:
15:be:13:c3:bb:07:08:bc:3c:53:ea:db:bd:4c:d2:
21:d2:31:87:a3:e8:0c:b9:68:72:0d:a0:6e:26:6b:
15:c9:19:6a:24:04:23:4d:80:a9:25:b2:a3:85:ea:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:5F:6F:0D:4E:7A:FF:03:99:88:5A:B3:4B:3F:F5:87:D0:1B:B2
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:53:b7:bf:4b:ea:d8:24:c9:35:15:79:dc:6a:ab:a4:b8:88:
48:b8:f1:23:e1:c9:a3:72:bc:13:06:f9:c4:a5:95:4f:de:ed:
b5:74:06:05:97:d6:1d:42:20:37:94:a2:39:2e:21:19:c5:42:
18:22:8e:a3:8d:bf:5f:f4:db:30:b0:4f:93:41:82:ee:8e:3c:
2e:a0:6a:1a:03:4d:6d:f5:a6:f6:ad:1e:67:9b:fa:d5:2c:0d:
e7:1a:1f:d8:03:64:a8:d9:ae:8e:a5:4c:fe:3e:b1:dc:ac:f1:
fd:5c:03:b9:7a:18:90:94:6d:9c:82:ba:42:00:48:21:b8:ae:
77:68:ec:69:a2:dc:c7:ea:74:31:e9:cf:90:6d:82:55:50:18:
08:64:20:04:fd:c5:e2:8f:56:34:b8:53:ae:b1:f8:cf:9b:be:
87:94:8c:cb:bc:2d:c5:d6:80:8f:9a:7b:74:89:73:52:84:05:
e5:d3:1c:83:9f:d7:93:cf:23:d8:41:08:a1:8c:71:57:f1:55:
5e:29:b3:92:c8:ea:df:17:03:88:0d:c3:35:c9:88:8a:4a:02:
a5:47:ee:75:86:5d:3f:4c:69:82:03:97:49:99:95:42:c9:dc:
50:14:b4:ff:26:30:63:78:69:99:95:39:bd:5d:86:33:ad:9d:
fe:d1:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:05 2025 by rpki-client