Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: OloVauNS4Pqy3wIYEZykynNhGak5QbzyB0ROzqqlMvU=
Subject key identifier: 26:CE:00:C5:5A:31:27:6F:74:FC:6C:96:CA:8C:95:44:09:B7:FF:5F
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019849D3088CC6952E63A8083DB011739403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 136E
Signing time: Sun 27 Jul 2025 03:00:23 +0000
Manifest this update: Sun 27 Jul 2025 03:00:23 +0000
Manifest next update: Mon 28 Jul 2025 03:00:23 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: D4kFc7EmRdxLdjqYRj5qwx94p8q/uK+o1vHmTkh/k68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:08:8c:c6:95:2e:63:a8:08:3d:b0:11:73:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 27 03:00:23 2025 GMT
Not After : Jul 28 03:00:23 2025 GMT
Subject: CN=26ce00c55a31276f74fc6c96ca8c954409b7ff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:ac:43:3c:b5:0e:bb:87:41:1a:3d:77:49:
f6:bf:f4:2d:7e:db:1d:03:b3:0d:48:1e:b2:3e:ab:
a7:1f:ba:fd:cb:8b:5d:38:4e:4f:2d:aa:ed:85:bc:
cd:fa:30:29:2a:da:60:2f:af:99:47:63:ec:cb:5b:
d0:2c:c4:2c:32:5f:2b:2e:07:b5:3a:69:00:99:39:
27:8c:e1:33:ed:fa:f4:52:f6:ca:f9:37:c0:40:e8:
91:70:3a:c4:21:4f:ca:3d:81:50:d4:68:af:e2:a0:
a6:f8:f4:9f:7c:14:e2:49:8f:ae:f2:50:57:e2:4e:
2b:30:00:b6:a1:09:2c:0a:b3:c4:3b:0b:b9:ac:b6:
5c:4a:0f:84:43:32:4b:d3:c3:ed:f5:28:27:55:6b:
26:ca:0a:ee:e2:23:6e:28:8d:2b:93:87:b9:a1:26:
5b:ce:36:b1:e1:b5:00:5e:03:a3:9e:dd:bd:5d:cd:
64:2f:51:45:f3:f6:a4:16:50:6a:5d:a6:d1:d6:53:
f5:0d:11:ae:0f:94:db:74:78:f0:12:c3:34:a8:87:
ad:e4:69:a7:2d:42:4e:24:26:8a:c0:ae:53:1f:47:
74:6f:70:3c:99:24:de:0c:d2:c3:f2:f7:93:97:8e:
2a:98:9d:21:f1:6c:4c:8d:d4:76:4c:e4:44:de:c9:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:00:C5:5A:31:27:6F:74:FC:6C:96:CA:8C:95:44:09:B7:FF:5F
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:85:fb:3b:26:f6:0c:e4:e1:cc:c5:42:18:af:d0:1a:7c:
06:bb:42:f3:9a:bb:97:3e:7f:57:ab:aa:a8:e1:5b:28:19:6d:
cf:8d:61:4d:06:52:2c:5a:29:12:16:98:d7:9a:f2:f5:d4:07:
6c:7b:98:b9:01:ea:aa:29:6e:89:4d:eb:b6:c5:68:f0:e3:b1:
02:7d:09:c7:ca:09:76:d7:a6:14:0d:2f:8b:2a:49:8b:0e:58:
8e:b4:d4:98:b9:85:85:d8:ab:89:8b:ed:15:65:72:6b:14:33:
0e:da:d9:f1:52:16:19:f7:55:b5:61:a2:15:76:ce:ee:06:cf:
b2:af:48:6c:da:a9:91:fe:73:fe:53:cb:96:c8:77:85:a9:db:
9b:54:db:92:06:3f:b9:6a:98:f9:8a:47:3c:5d:8f:47:40:27:
7f:0d:f8:bb:95:ed:c9:09:11:5d:6f:ae:6b:87:32:cb:3b:61:
1f:ad:18:65:e9:18:6c:95:c6:9a:b8:9e:64:1b:b8:a8:14:88:
c2:74:92:81:85:8b:25:81:4c:99:c2:dd:84:2a:ac:a3:ea:20:
5b:18:5c:53:fa:f7:77:4a:2d:68:08:69:e2:4e:af:79:f3:14:
e2:ce:ba:a8:97:a4:d4:d5:4b:a3:6d:90:2d:da:3d:27:83:66:
93:6e:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:23 2025 by rpki-client