Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: KIitJ8/UuPbLKB8ZF94pa2iphfXYaNlZbab3VT48gOs=
Subject key identifier: CD:0C:32:A2:0E:0A:DA:30:6B:74:AB:F9:8E:05:94:32:CF:5B:E4:A4
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01984A412C5D4BA6F9B8E935128987A3483F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0D61
Signing time: Sun 27 Jul 2025 05:00:41 +0000
Manifest this update: Sun 27 Jul 2025 05:00:41 +0000
Manifest next update: Mon 28 Jul 2025 05:00:41 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: nOW/WVsSIemMhISunyCqRs0ohUW0Pui8NclEnxhLp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:2c:5d:4b:a6:f9:b8:e9:35:12:89:87:a3:48:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jul 27 05:00:41 2025 GMT
Not After : Jul 28 05:00:41 2025 GMT
Subject: CN=cd0c32a20e0ada306b74abf98e059432cf5be4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:72:5f:48:f3:cd:23:03:c8:45:e7:90:e6:
2a:f8:18:2d:83:98:1e:3e:c4:f0:0e:eb:4c:1d:7a:
d3:0a:e3:a7:a5:d6:05:76:29:d1:56:a2:01:9d:17:
a4:be:71:51:01:e5:54:e7:09:47:c1:d6:58:df:3f:
9a:5f:0f:ff:bb:cb:d4:da:07:22:ba:14:3c:e2:47:
4f:9f:b1:08:e9:e6:56:11:be:de:3b:0f:20:d1:19:
b8:fa:b7:db:94:c2:df:f2:30:ab:51:e4:cb:91:6f:
af:b2:d8:4a:a4:00:9c:7c:37:43:6d:f2:e1:54:a9:
f2:55:1f:e4:01:93:64:eb:d9:a6:13:de:20:c1:11:
d0:b6:0b:92:4e:d9:ad:b2:d4:6a:0c:a6:ee:df:14:
bc:e5:00:82:a8:b9:f2:ed:e7:08:81:b4:08:43:41:
f1:f6:f0:b9:c8:45:06:32:23:f5:fa:99:ed:ac:59:
c6:8d:c9:a3:6d:62:4f:80:b6:79:21:12:09:67:c7:
e9:c4:19:45:73:eb:8d:49:8d:4f:8d:77:79:a7:ac:
59:07:ca:77:4e:b2:01:f8:e1:f9:0a:f9:90:dd:fa:
86:48:f4:f7:d3:b1:d0:fb:39:78:2b:16:32:5b:71:
df:8a:5a:6d:0e:e5:b5:18:86:75:79:19:94:49:cb:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:32:A2:0E:0A:DA:30:6B:74:AB:F9:8E:05:94:32:CF:5B:E4:A4
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4a:2b:3c:7f:e6:b0:b5:a7:e1:1d:61:f1:b2:c5:8d:b1:70:
34:1b:78:4d:94:30:87:de:f0:52:83:e7:05:30:93:56:44:fe:
c0:14:79:a6:48:1c:b2:c3:b8:6f:9b:b7:53:27:db:03:cf:05:
40:bd:93:bf:e6:cc:41:46:9a:a9:e4:ac:2f:28:54:7a:59:47:
2c:83:14:1a:da:95:07:fd:d7:3f:74:f5:39:c8:d3:bf:75:b9:
e3:2c:e1:ba:4b:07:79:d9:15:65:06:96:6c:33:19:6b:96:c0:
36:34:c1:fb:0f:22:94:ce:c9:0e:9e:3c:ab:10:67:9d:41:1a:
ee:8d:aa:e3:39:3c:40:37:ac:d1:3d:a5:c2:4d:01:68:f0:60:
4d:f2:6f:06:6b:fd:2c:8d:cc:35:16:6b:49:6a:6e:f5:af:79:
3a:fa:90:f8:a9:0d:5a:50:95:3a:96:5f:3f:48:ce:89:81:28:
27:5c:ba:bd:10:ff:08:96:b9:31:92:e4:b7:a9:1a:e7:67:8a:
4b:31:13:8f:1d:2c:e4:1c:96:47:49:dd:76:5c:ef:e4:50:f1:
34:72:a6:fd:4e:3d:82:bf:ab:f7:e6:79:d6:36:d9:77:8b:1f:
cd:b8:c9:e5:da:69:73:10:a8:b4:eb:ea:98:0e:ea:b3:c0:3b:
c4:fd:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:15 2025 by rpki-client