Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier: sujJNVwaXzcgY1UeVNxd+f8HMBbzih2LlsbzuI2X8EA=
Subject key identifier: 41:DF:3B:A8:8C:55:18:F0:72:9A:7A:0B:CE:4B:C5:13:69:46:28:10
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01984A417DE3D3F3451E0EE9F7151ED7E308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number: 1543
Signing time: Sun 27 Jul 2025 05:01:02 +0000
Manifest this update: Sun 27 Jul 2025 05:01:02 +0000
Manifest next update: Mon 28 Jul 2025 05:01:02 +0000
Files and hashes: 1: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: PlgVUMwP6JHKwCa3+9tbzxh+IumN8tWil0YQSH4fFRM=)
2: ir_nzSQYAsgPoPu8kRGYQzALm7U.roa (hash: TCpfNyg//XzFyrfc8SAsUbs4iWswcCSro2mnromAmQo=)
3: m3SzGaHBe-liV9k_hjkTUrNHXMg.roa (hash: 1IYirY3YGGwbakrzW31PvEOIIPUhpCQb3MNxcEFgdzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7d:e3:d3:f3:45:1e:0e:e9:f7:15:1e:d7:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Jul 27 05:01:02 2025 GMT
Not After : Jul 28 05:01:02 2025 GMT
Subject: CN=41df3ba88c5518f0729a7a0bce4bc51369462810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:84:81:72:05:9c:9c:d1:a7:11:84:a7:aa:
9f:c4:40:67:2f:3b:3d:02:7c:7d:c5:4c:f3:58:64:
44:93:4c:0c:a0:8d:91:ac:38:08:b4:9f:af:e8:de:
4c:ca:ed:04:3d:94:9a:40:01:38:3a:5c:4b:f2:3c:
85:94:38:da:08:7e:70:96:8f:32:66:cf:b2:2e:13:
ee:e8:11:fd:f0:3b:cb:00:f2:8e:a0:9a:98:45:7c:
59:ea:e3:e7:1d:d9:6e:b5:bb:cf:5e:60:9d:00:63:
57:c2:9a:aa:78:c1:c5:a0:9b:e3:03:88:67:14:cb:
e8:47:6c:9f:92:81:6f:44:82:94:5a:08:2c:33:7f:
56:9c:63:53:33:be:15:80:e0:22:8a:42:49:7f:a3:
16:d3:cc:20:32:b7:a7:50:5a:01:a3:33:50:77:04:
e7:ed:1b:a0:50:a3:74:99:b1:32:34:7f:8e:f4:a8:
2e:b3:3d:91:7d:50:98:ff:cf:6c:4a:69:a3:4f:fd:
1f:f5:a1:7b:2b:64:f2:4b:66:cb:3a:5c:7a:37:1c:
18:40:67:fe:15:4e:0f:29:f2:a1:c2:4c:9b:0f:cd:
b0:bb:00:16:1d:85:51:74:e6:3d:0f:7a:fc:b0:ff:
b1:7c:35:41:a2:24:4b:77:51:46:7f:ea:0e:6e:c4:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:3B:A8:8C:55:18:F0:72:9A:7A:0B:CE:4B:C5:13:69:46:28:10
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:da:34:3e:ae:89:1b:e3:a5:73:1f:03:8e:40:ac:06:16:
6e:1f:82:19:0d:08:c3:84:be:78:36:4a:b5:4e:4c:6e:85:c8:
ff:b6:26:a1:c9:53:a8:49:bd:b0:2d:f9:91:3e:e2:e7:0b:6c:
d2:75:e7:68:e8:a7:bd:6c:44:9c:eb:84:61:ae:98:2b:ea:73:
1d:46:08:a5:86:ac:4c:8a:5c:68:cd:3b:59:97:fc:3a:16:dc:
4c:f4:dd:34:24:f3:dd:39:f8:7e:58:3f:c1:81:9d:fa:dd:14:
4e:40:5d:96:66:69:dc:9a:a8:91:b7:9f:f4:7e:24:81:fb:f3:
b0:77:1b:54:e3:62:4c:97:c2:27:a7:53:4c:04:69:b9:ce:20:
53:89:3b:9f:5a:c7:19:7c:40:4b:df:af:b3:3e:16:d5:cc:a6:
20:9a:bf:87:e0:4e:9f:be:ff:c4:de:d8:e2:ab:ea:58:6d:7c:
a1:a9:d3:e6:b3:38:b4:2c:cd:11:eb:33:e7:ad:0b:90:f0:f8:
93:d9:0f:82:8f:dc:d6:27:1c:0d:65:bd:60:e0:af:82:78:f1:
aa:81:67:35:92:1a:0c:77:7f:0f:40:1a:2b:9f:3f:68:4d:0d:
95:1c:38:9f:24:ac:42:f3:0b:99:3d:11:df:62:6b:5f:ff:6f:
b2:cb:d6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQX3j0/NFHg7p9xUe1+MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDg1ODNiMjExNzQxMDQ5ZTZiYjE5YTk0NmQ4MzFhYWJm
MTFhZDMwHhcNMjUwNzI3MDUwMTAyWhcNMjUwNzI4MDUwMTAyWjAzMTEwLwYDVQQD
Eyg0MWRmM2JhODhjNTUxOGYwNzI5YTdhMGJjZTRiYzUxMzY5NDYyODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+EgXIFnJzRpxGEp6qfxEBnLzs9
Anx9xUzzWGREk0wMoI2RrDgItJ+v6N5Myu0EPZSaQAE4OlxL8jyFlDjaCH5wlo8y
Zs+yLhPu6BH98DvLAPKOoJqYRXxZ6uPnHdlutbvPXmCdAGNXwpqqeMHFoJvjA4hn
FMvoR2yfkoFvRIKUWggsM39WnGNTM74VgOAiikJJf6MW08wgMrenUFoBozNQdwTn
7RugUKN0mbEyNH+O9Kgusz2RfVCY/89sSmmjT/0f9aF7K2TyS2bLOlx6NxwYQGf+
FU4PKfKhwkybD82wuwAWHYVRdOY9D3r8sP+xfDVBoiRLd1FGf+oObsQiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHfO6iMVRjwcpp6C85LxRNpRigQMB8GA1UdIwQY
MBaAFFzYWDshF0EEnmuxmpRtgxqr8RrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83Mjk4YWItN2I5Yy00N2FkLTkwODUt
NTA5NzRiY2RjMjQ4LzEvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC83Mjk4YWItN2I5Yy00N2FkLTkwODUtNTA5NzRiY2RjMjQ4
LzEvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFnaND6u
iRvjpXMfA45ArAYWbh+CGQ0Iw4S+eDZKtU5MboXI/7YmoclTqEm9sC35kT7i5wts
0nXnaOinvWxEnOuEYa6YK+pzHUYIpYasTIpcaM07WZf8OhbcTPTdNCTz3Tn4flg/
wYGd+t0UTkBdlmZp3Jqokbef9H4kgfvzsHcbVONiTJfCJ6dTTARpuc4gU4k7n1rH
GXxAS9+vsz4W1cymIJq/h+BOn77/xN7Y4qvqWG18oanT5rM4tCzNEesz560LkPD4
k9kPgo/c1iccDWW9YOCvgnjxqoFnNZIaDHd/D0AaK58/aE0NlRw4nySsQvMLmT0R
32JrX/9vssvWjw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:34 2025 by rpki-client