Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: H0y3fXsdgEctPlnzi74Z9goQwW5BzSGRdsRbeQj8t4E=
Subject key identifier: F3:33:5F:59:1D:09:75:C1:FD:99:AA:EC:5C:BB:0E:FD:51:54:4D:DA
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0198560E998EB411978269B054EEED857586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 1598
Signing time: Tue 29 Jul 2025 12:00:54 +0000
Manifest this update: Tue 29 Jul 2025 12:00:54 +0000
Manifest next update: Wed 30 Jul 2025 12:00:54 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: /nm5zsE3zhxpX2H2RdtdJZqziz+o2CBnvu6SyMVt8+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:99:8e:b4:11:97:82:69:b0:54:ee:ed:85:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Jul 29 12:00:54 2025 GMT
Not After : Jul 30 12:00:54 2025 GMT
Subject: CN=f3335f591d0975c1fd99aaec5cbb0efd51544dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:71:5e:fe:4c:6a:af:db:dd:3a:f9:11:74:
c6:ca:1f:a6:17:42:5b:1f:20:6d:e3:95:41:a5:34:
00:dc:4d:54:16:b8:80:41:bc:c3:0d:8f:a1:04:d5:
14:1c:e9:8c:91:d4:08:b5:13:9f:51:a1:c1:ba:bd:
fb:6e:37:aa:cd:bd:c1:db:cc:58:f5:2d:cc:74:1c:
76:1d:ff:11:26:db:04:1e:2f:0d:58:fb:1a:3c:10:
07:cc:56:70:d9:da:0b:a9:e9:b9:30:40:cb:de:b2:
8b:f9:4e:e6:1a:92:e0:79:98:75:d1:50:2c:1a:f8:
0c:da:5e:ef:08:23:18:74:f7:ae:4d:b8:16:70:4a:
c3:a7:53:f9:51:01:1d:8e:96:43:5a:c0:55:f2:6b:
01:53:b4:60:41:e6:d8:88:0d:8a:28:66:7f:45:96:
a0:1f:a1:7c:b9:47:5f:1b:9b:cf:cb:ae:96:ff:9d:
73:3f:48:49:81:79:fd:6a:6d:4f:d1:b4:93:64:02:
b0:72:2f:59:10:6e:df:0c:69:b9:d4:b6:eb:37:05:
5b:f0:0a:17:bf:1d:e7:ce:10:4d:ef:9c:e7:e8:89:
02:0f:8b:8e:bf:f0:56:45:61:3a:9f:de:4e:c0:57:
3c:a2:86:5a:79:fd:f7:b7:85:fc:f5:bf:9e:74:5b:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:5F:59:1D:09:75:C1:FD:99:AA:EC:5C:BB:0E:FD:51:54:4D:DA
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:df:ee:32:ef:0a:cd:34:3f:77:38:3b:59:dd:a0:a2:c5:d1:
9d:82:83:84:a5:9e:81:b5:8a:5c:a8:a9:ce:90:89:b1:2f:89:
eb:75:70:8b:da:74:9c:2d:7a:c9:dc:8b:f8:4f:6d:54:1c:31:
8b:71:8c:f4:a9:64:4d:74:21:5f:f3:b1:4c:d3:ac:1a:c6:f7:
b1:f0:b1:8e:ae:c8:a0:51:3d:ba:7a:f6:ee:e5:f0:11:f2:ba:
33:1a:99:fb:8d:e3:f4:a8:68:f0:9c:0e:8e:7b:d1:70:97:2c:
7c:47:f0:be:4e:41:0f:50:8f:aa:78:f4:ac:1d:b3:0c:10:b4:
16:0c:73:43:a9:74:a3:be:b2:9f:76:38:02:f5:b0:a9:3e:7f:
36:36:99:df:2c:7a:36:07:bb:7e:f6:b0:b6:37:cd:76:6a:ec:
c0:3a:b3:bc:3e:2e:cc:94:3b:ea:27:60:c6:cf:da:31:03:ed:
65:82:44:b2:8c:f5:9d:2a:06:d5:08:49:27:23:09:36:d8:b4:
2c:20:02:b5:06:d0:c2:cb:66:0d:10:be:af:07:1a:a1:74:b1:
43:1c:8f:ed:64:9e:b4:68:bb:07:c2:6d:22:cc:bb:67:0b:eb:
09:92:66:89:e4:37:fe:c7:8e:34:66:d6:77:82:a5:ca:82:73:
18:79:a0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWDpmOtBGXgmmwVO7thXWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTgxMDU1N2NiMDY3MGJjOWMwOTMzZTAyN2U5YmQ4MmFi
MTU2ZGYwHhcNMjUwNzI5MTIwMDU0WhcNMjUwNzMwMTIwMDU0WjAzMTEwLwYDVQQD
EyhmMzMzNWY1OTFkMDk3NWMxZmQ5OWFhZWM1Y2JiMGVmZDUxNTQ0ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu9xXv5Maq/b3Tr5EXTGyh+mF0Jb
HyBt45VBpTQA3E1UFriAQbzDDY+hBNUUHOmMkdQItROfUaHBur37bjeqzb3B28xY
9S3MdBx2Hf8RJtsEHi8NWPsaPBAHzFZw2doLqem5MEDL3rKL+U7mGpLgeZh10VAs
GvgM2l7vCCMYdPeuTbgWcErDp1P5UQEdjpZDWsBV8msBU7RgQebYiA2KKGZ/RZag
H6F8uUdfG5vPy66W/51zP0hJgXn9am1P0bSTZAKwci9ZEG7fDGm51LbrNwVb8AoX
vx3nzhBN75zn6IkCD4uOv/BWRWE6n95OwFc8ooZaef33t4X89b+edFsYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMzX1kdCXXB/Zmq7Fy7Dv1RVE3aMB8GA1UdIwQY
MBaAFF5YEFV8sGcLycCTPgJ+m9gqsVbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAt
YTQ0MDdhNWQzMjFhLzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAtYTQ0MDdhNWQzMjFh
LzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9/uMu8K
zTQ/dzg7Wd2gosXRnYKDhKWegbWKXKipzpCJsS+J63Vwi9p0nC16ydyL+E9tVBwx
i3GM9KlkTXQhX/OxTNOsGsb3sfCxjq7IoFE9unr27uXwEfK6MxqZ+43j9Kho8JwO
jnvRcJcsfEfwvk5BD1CPqnj0rB2zDBC0FgxzQ6l0o76yn3Y4AvWwqT5/NjaZ3yx6
Nge7fvawtjfNdmrswDqzvD4uzJQ76idgxs/aMQPtZYJEsoz1nSoG1QhJJyMJNti0
LCACtQbQwstmDRC+rwcaoXSxQxyP7WSetGi7B8JtIsy7ZwvrCZJmieQ3/seONGbW
d4KlyoJzGHmgsw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:03:22 2025 by rpki-client