Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: ROKQ/qyN4t9DHdusrcmnhCRDpMCSJr+tiEmxH2wMtFY=
Subject key identifier: 21:C9:F6:B0:61:42:BF:8E:57:E5:52:90:8B:8F:54:40:0B:B0:25:8F
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01984709153DE1F76F255D29F4B9FC7EADB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 14:00:34 +0000
Manifest this update: Sat 26 Jul 2025 14:00:34 +0000
Manifest next update: Sun 27 Jul 2025 14:00:34 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 4lIazWd4z6TWIpd41eU+Oot9iCst9kEHtp1+x9WN5f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:15:3d:e1:f7:6f:25:5d:29:f4:b9:fc:7e:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Jul 26 14:00:34 2025 GMT
Not After : Jul 27 14:00:34 2025 GMT
Subject: CN=21c9f6b06142bf8e57e552908b8f54400bb0258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:0a:dd:88:c2:f8:24:a5:c0:f0:31:fa:7e:
3e:46:f7:72:da:a9:a4:bf:3b:3a:7e:72:75:62:3b:
95:49:55:c3:28:b0:a0:19:20:5a:90:e5:16:41:05:
e4:9c:76:6d:9e:06:2d:c3:30:f4:3b:4d:3d:b6:d8:
d4:38:c5:96:6c:91:a8:34:bf:ab:22:f9:4b:83:6d:
96:cb:57:f1:4f:b6:7a:47:39:0d:8b:74:e5:bb:27:
1a:3f:e9:cc:c5:89:08:9d:4d:31:ee:3c:a9:31:fd:
6b:35:75:a4:9c:04:4f:72:7e:5a:37:d6:7c:fe:fa:
7c:da:13:97:d5:6e:de:33:de:c2:18:d7:89:e1:d0:
b8:a6:2b:68:b2:e5:5a:9a:c0:cc:0d:9e:30:27:70:
62:bc:99:b3:aa:2f:34:d8:2c:1c:9e:2d:56:af:f4:
81:8c:d3:ee:17:bf:8d:0b:a7:65:03:d1:28:8b:f8:
2b:b8:ae:53:be:ca:2f:b4:a1:d2:a4:ef:7f:ad:90:
28:1b:c5:4e:f4:28:05:7c:6b:01:dd:5c:71:bc:9f:
76:e5:b8:42:e0:f8:8a:86:a6:79:5b:18:3f:16:ab:
1c:c5:fa:d5:2d:95:c7:8f:d4:a5:54:dc:44:ee:18:
de:37:07:7b:e4:5f:7c:cd:06:1a:16:dd:e1:c2:fb:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:F6:B0:61:42:BF:8E:57:E5:52:90:8B:8F:54:40:0B:B0:25:8F
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:b7:db:4a:a0:c9:0a:ce:a4:35:8d:34:d7:b9:ae:73:be:
cd:86:7c:22:79:05:d0:11:c1:ff:6c:3f:3b:bb:d3:d1:1d:2c:
41:05:c8:56:5a:75:4a:aa:70:a7:24:88:53:c4:b3:d1:bb:a3:
e0:f6:79:cc:18:6e:80:84:17:0c:96:64:e2:50:ee:f9:22:53:
d9:2d:a7:8a:46:72:ec:ca:b7:a2:fc:46:23:b7:59:be:87:1b:
a1:60:ce:ad:5f:ae:b7:40:64:19:e1:a3:6d:2f:d6:60:9b:95:
60:2f:aa:8f:09:47:18:50:9a:dd:5b:00:7b:c6:29:38:fa:58:
79:41:8e:de:dc:30:9f:13:c9:5a:ff:ef:32:7a:ab:2d:50:f4:
f4:b4:8c:3d:5f:f6:6c:30:63:d8:c9:3b:14:7b:d6:15:88:05:
7c:0d:81:b9:45:6c:ef:ec:af:84:67:17:32:f6:16:c5:7f:1f:
f8:be:5c:bd:28:e1:4b:eb:42:dd:9b:cd:c9:39:c1:6a:a4:b7:
78:cd:d5:ad:21:b9:af:20:a3:e1:d7:51:42:d5:f9:38:41:a5:
c2:68:97:16:61:00:cb:1b:90:ae:91:3e:c1:d8:7a:44:92:33:
a9:14:8d:10:bb:41:3a:24:b8:05:b6:af:fe:0c:d0:4f:e3:e2:
89:95:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:24:46 2025 by rpki-client