Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: Y4CedIsGsZlUnf9ZcmjcZCFgRI7Px1J09IV4m+BrXQ4=
Subject key identifier: 5E:62:D5:C4:81:A0:46:79:0F:E7:5D:FB:12:88:D4:F7:0B:28:9D:57
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 0198496656A589571519756BC854BB966AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 04E0
Signing time: Sun 27 Jul 2025 01:01:40 +0000
Manifest this update: Sun 27 Jul 2025 01:01:40 +0000
Manifest next update: Mon 28 Jul 2025 01:01:40 +0000
Files and hashes: 1: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: I9U3A43uDPwu/tphGFFS6XGrnh3yw19yKHuZGMlxSnI=)
3: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:56:a5:89:57:15:19:75:6b:c8:54:bb:96:6a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Jul 27 01:01:40 2025 GMT
Not After : Jul 28 01:01:40 2025 GMT
Subject: CN=5e62d5c481a046790fe75dfb1288d4f70b289d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:52:18:e2:73:73:40:45:13:01:3c:f0:ef:
d4:77:f0:9a:48:4d:f1:cf:90:c9:e8:46:83:08:d0:
77:f2:d8:5b:95:fb:45:d9:34:89:3c:13:56:22:4d:
b5:7e:64:d1:c4:83:de:ac:e7:c9:3d:33:40:63:c8:
f4:5e:78:a7:63:c9:6f:0c:ff:6d:45:db:79:7f:a8:
c1:bc:87:f4:74:8b:2b:3e:0a:72:17:98:94:c0:5c:
9c:73:11:67:88:64:a6:61:54:ba:a2:e8:37:d2:01:
2e:81:0e:fe:29:29:e4:a3:a5:0b:49:3f:53:40:2a:
77:2e:76:30:32:d8:93:b0:c2:5f:5f:65:db:83:cd:
98:bc:26:2f:c1:40:43:95:8a:e8:a4:ef:88:de:1d:
b5:7f:ce:35:e1:35:5a:1b:1e:dc:cb:8f:f7:92:43:
ba:90:55:8c:86:eb:9a:23:3d:d7:45:1c:ed:d9:96:
69:65:15:5c:36:5a:78:a0:70:09:72:c4:8f:83:a2:
1d:65:68:86:22:cb:74:e5:62:34:67:b9:fd:ac:40:
3d:47:ec:3d:a8:21:62:a7:38:68:21:2f:6c:20:b9:
13:67:48:47:e3:b9:2c:68:09:20:ec:e2:1d:07:5e:
dc:9c:55:c5:b1:4d:b3:bd:cb:f0:52:b1:4a:31:17:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:D5:C4:81:A0:46:79:0F:E7:5D:FB:12:88:D4:F7:0B:28:9D:57
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:f4:44:0f:7e:42:f5:ec:5f:e9:b2:a1:b4:d5:0c:0c:ce:
bd:e7:c1:82:7b:21:67:e4:cb:1c:da:8d:33:4a:c5:b0:2d:0b:
ba:c5:fa:c3:04:f4:88:83:7f:47:da:18:43:09:9e:83:0c:6d:
23:99:30:70:18:a9:15:de:8c:a6:f1:29:b5:d9:6e:5a:44:23:
4a:02:99:b3:b0:45:cd:36:13:28:6e:f9:ee:87:64:11:6c:d3:
c8:a9:0c:ac:c4:ff:fe:35:1d:c4:b7:d1:19:ce:83:e5:cf:6e:
2d:9a:68:e6:52:f8:b5:ad:58:ba:5d:6d:1f:ee:2c:d4:b6:28:
e0:6c:dd:91:2f:94:86:0d:d0:48:8f:d3:f0:56:ac:14:89:c5:
7f:93:e4:5d:6d:7b:c8:cd:e4:d6:9b:7c:49:62:c6:74:48:60:
38:bc:86:83:ca:86:09:11:66:42:6d:58:2c:53:ce:0b:3c:7c:
ff:15:3d:45:fa:8a:15:28:38:99:c5:13:a3:84:79:03:af:69:
a5:e8:a4:d9:a3:66:2c:b3:ed:0e:71:25:76:c3:0a:66:af:13:
4d:66:d0:cc:d2:27:22:c6:bd:0f:93:03:db:d8:16:b8:d0:d3:
c4:9d:82:01:fc:d0:27:98:f1:99:8f:94:ba:76:0d:b9:06:16:
ae:ec:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:04 2025 by rpki-client