Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: tPSxFAAbRM3H5rkqrWwKVVlnTqJcysdCvFwN3Fx+uVQ=
Subject key identifier: 9F:96:38:1F:F3:99:6B:03:CD:33:8C:65:72:64:EC:8C:58:49:F4:60
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 019849D3345BEDC8ABB22998EEDE1B66AEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 105A
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: NGmv7NPqGLWW3VP3BUomQeEmPWXLo21M7xlA1nTOTdQ=)
2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:34:5b:ed:c8:ab:b2:29:98:ee:de:1b:66:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=9f96381ff3996b03cd338c657264ec8c5849f460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:6b:5d:40:5e:2f:5f:41:bd:08:5c:bf:81:
95:b9:79:f5:b5:3a:85:bc:93:c7:ee:e0:9f:45:41:
a8:67:1b:6c:11:2e:30:3d:7a:d8:23:02:09:0c:6f:
a7:07:76:ae:cd:4a:32:b9:58:6a:4e:e5:00:67:e0:
e6:a3:6c:86:b8:74:9e:75:f2:86:2c:5f:3d:00:ec:
80:ea:f1:39:6d:c4:98:f9:ab:71:77:64:43:5d:33:
e3:a1:30:e5:32:47:54:aa:71:75:2a:c0:00:e0:9b:
50:f6:2b:02:63:08:bf:01:77:35:75:60:52:41:48:
4c:7a:ea:9a:1f:50:d7:5d:99:b0:73:6e:25:69:82:
26:12:7b:0b:76:37:c4:00:b0:07:c4:51:49:8d:54:
eb:b2:fd:94:34:b9:38:dd:28:a8:61:70:59:1f:e2:
1b:ca:2c:29:89:fb:1c:8d:70:aa:5f:e0:6f:e5:45:
da:d1:de:ad:63:0c:1b:71:48:08:64:c8:97:53:6d:
e6:7a:6d:0c:56:a2:df:6f:72:95:f2:49:8e:f1:b2:
15:cb:75:d4:6c:6b:b1:a2:2b:18:b4:fd:24:21:cf:
10:52:69:da:ec:5c:32:4e:fd:26:42:e8:61:f1:04:
52:5b:dd:36:ba:84:5d:91:cf:20:75:bf:02:82:cf:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:38:1F:F3:99:6B:03:CD:33:8C:65:72:64:EC:8C:58:49:F4:60
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:70:80:2a:13:fa:2b:ce:4f:00:0b:5b:0f:8a:cd:5b:9b:
5f:1e:f1:5a:1e:bc:00:f5:ef:41:20:f5:9f:91:58:43:33:b8:
be:90:3d:91:b7:56:ce:d4:7c:20:f7:f8:ac:2c:7c:0c:e3:d6:
0b:2f:9e:cc:be:5f:d0:56:97:1b:f3:4f:b5:b4:6f:51:09:a6:
14:e5:82:0c:0e:ff:26:c1:47:0f:1c:67:da:82:88:ce:fa:f5:
2b:fa:a5:6f:d2:14:a6:89:15:50:02:5b:9a:3d:b6:b7:a5:0b:
5b:fd:2f:f1:55:bd:1e:b9:48:b9:0a:7f:fc:51:b1:11:84:3c:
f5:7b:5b:fe:70:38:6e:06:ad:56:82:13:d6:94:84:8a:e8:45:
54:00:c3:b0:14:ad:4a:8b:ac:8c:6b:3d:86:1c:6f:1c:e9:39:
10:ce:ba:db:09:c7:81:5b:ac:3d:70:c4:50:95:76:7a:34:42:
1a:2d:53:66:b2:13:77:04:cb:8a:74:ec:cf:e1:5f:1b:3b:5b:
78:a6:c9:e4:4e:69:cc:09:95:3b:23:71:5c:a7:d9:a8:7d:f6:
7c:86:91:25:a3:1f:ac:0c:2c:cd:af:fd:3f:f3:4b:ae:4c:3f:
e2:e4:7d:43:13:fd:90:03:c4:0e:f7:69:80:73:28:aa:13:00:
8d:f2:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:06 2025 by rpki-client