Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: dHDJKJxgBqbwwDKBCfGkeVzYDiCjuFgiFCXiXW0GdsY=
Subject key identifier: 35:6D:CB:F2:3C:C6:2A:4D:7C:89:69:E8:57:D5:53:EC:EC:A9:67:52
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01984A40D006D196CF10DDE2BC6343AE0A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 05C2
Signing time: Sun 27 Jul 2025 05:00:18 +0000
Manifest this update: Sun 27 Jul 2025 05:00:18 +0000
Manifest next update: Mon 28 Jul 2025 05:00:18 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: XhZN+fWzlI2wFth/u4tT5L434dNQ7p6ORhANnY05OtI=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d0:06:d1:96:cf:10:dd:e2:bc:63:43:ae:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jul 27 05:00:18 2025 GMT
Not After : Jul 28 05:00:18 2025 GMT
Subject: CN=356dcbf23cc62a4d7c8969e857d553ececa96752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:56:03:bd:b9:3d:94:50:f0:78:3a:ae:06:
e6:f7:bf:94:17:17:0c:5c:3f:e0:83:d9:d7:aa:a7:
3c:2a:63:ca:33:64:d0:89:9d:0a:88:c4:41:c9:f5:
a2:59:35:81:9b:48:45:bd:51:e4:99:f7:b1:34:eb:
a6:15:db:26:b1:3c:67:b4:5e:0e:82:0c:7b:5a:96:
1e:46:28:1e:56:3d:1e:c8:a0:a8:35:9e:a5:77:bc:
2f:76:3b:35:5c:29:2b:e8:e9:63:6b:08:a1:1d:fd:
5f:0d:ad:77:b7:5d:02:f6:87:f2:cf:d1:1e:0a:da:
6e:81:98:ba:c1:9e:aa:18:01:af:6a:e6:dc:4e:bf:
c6:7b:1c:71:9d:e6:76:a1:ae:bf:45:2e:cb:69:f1:
38:80:d0:a4:3a:a5:37:e0:3d:c1:2d:bc:be:f4:0b:
da:88:16:58:09:1e:b7:af:09:8a:12:6e:5e:b7:3c:
2f:f2:3d:f7:4b:86:43:92:6a:c5:5e:65:2a:85:b2:
7e:d9:e0:05:30:fc:d4:55:e2:df:35:65:2a:26:b2:
ee:fa:ef:2b:fb:a3:ab:34:0a:5c:c8:c2:7d:6c:8e:
d9:93:ae:4d:27:ca:77:ed:bf:ec:9c:4a:d3:66:40:
79:11:5c:a6:a0:49:f3:8b:a8:0b:c8:77:2c:65:4d:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:CB:F2:3C:C6:2A:4D:7C:89:69:E8:57:D5:53:EC:EC:A9:67:52
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:f1:f7:7c:0e:69:e3:bf:61:35:90:41:f3:4a:a8:74:77:
4f:19:13:0f:2e:88:40:e3:9e:7d:c4:e4:44:01:a8:a2:72:47:
57:37:6c:20:e9:dc:81:3f:13:e9:cb:c6:91:e0:8c:26:a7:fc:
0c:c4:f7:b8:38:ec:ef:20:a9:77:f1:1c:9b:ca:c6:b5:ec:03:
34:6d:99:9d:6b:4f:35:a6:4e:ac:29:82:23:50:e7:a8:03:f6:
26:08:bc:bf:6a:c4:93:2d:2b:18:29:11:68:f0:62:66:06:0b:
db:5b:85:4d:ea:46:44:08:4f:05:00:5f:8e:8b:45:f8:e9:2b:
2c:8b:db:88:1d:1b:bb:f0:e7:0b:4c:45:b7:c3:f2:9e:bc:8f:
82:89:57:4c:bb:1f:cb:31:d3:4b:73:0e:e2:ef:d9:83:13:74:
b6:ec:5b:b5:8c:f7:4a:43:f7:17:c9:72:d4:a1:dd:5e:f5:8b:
35:d0:4c:b6:a5:43:34:5b:cf:37:4a:68:f7:78:e9:ed:21:0c:
d1:9f:9c:00:f8:39:dc:e3:57:d2:9a:0d:ba:89:4f:cb:a2:0f:
fe:62:cb:04:32:bb:06:92:1b:e2:e6:45:c3:07:11:ab:12:8b:
eb:d5:4d:86:a4:78:c5:bd:0e:65:20:f8:98:c0:0b:45:f6:10:
65:0a:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:36 2025 by rpki-client