Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: 8FlFz/vDUeovzWoNSJMr4EQCm+Z/b0TQ4nEvoUO+1Pw=
Subject key identifier: CE:AC:B5:6D:8C:D6:C4:1E:29:3B:68:A7:5F:B4:D1:80:35:51:28:50
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01985757ED20C70382E18C75ED0784C1887F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 18:00:36 +0000
Manifest this update: Tue 29 Jul 2025 18:00:36 +0000
Manifest next update: Wed 30 Jul 2025 18:00:36 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: r0BLItk+fT89qUz+plz8l3ojYYYZ+nGBCnmngwiL2sY=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:57:ed:20:c7:03:82:e1:8c:75:ed:07:84:c1:88:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jul 29 18:00:36 2025 GMT
Not After : Jul 30 18:00:36 2025 GMT
Subject: CN=ceacb56d8cd6c41e293b68a75fb4d18035512850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:54:c3:b2:59:4c:55:7d:d9:41:7a:33:28:
81:1e:ba:d3:bb:6b:ec:96:55:08:d7:01:c2:e1:83:
df:83:9b:c3:41:a3:69:b9:89:7a:d9:e4:c3:92:e3:
76:45:97:45:30:98:74:c1:04:55:84:69:51:48:cb:
b8:19:36:01:85:52:f9:1e:9c:d4:b5:0c:72:07:b3:
52:22:2b:8b:13:42:b5:d7:e0:fc:7a:54:ef:b2:19:
e1:d6:da:5c:72:c2:ab:15:d6:d6:a9:22:5f:87:ce:
54:0c:2d:1f:de:53:f4:e1:25:e0:b7:e6:8b:6a:97:
c5:cd:35:c9:26:c4:57:a5:65:48:27:26:50:85:af:
00:f4:44:88:05:9d:33:dd:dc:8a:05:1a:36:71:a2:
53:a0:5e:ae:2d:3b:6f:c9:d0:b5:fc:03:64:e6:08:
2f:8f:10:78:61:a5:db:12:6a:17:70:d9:50:1e:40:
f8:dd:10:b8:4f:e0:5d:42:ee:6d:55:72:02:da:90:
64:25:80:cc:39:44:f1:46:8d:e2:0a:de:c9:fe:fe:
09:ba:90:3e:da:6a:88:03:14:f1:a3:6a:52:f3:06:
bd:0b:35:d2:a5:2f:68:62:69:64:cb:29:40:18:0c:
2b:f5:47:c1:44:e1:3c:c2:16:88:22:f3:6f:c4:2e:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:B5:6D:8C:D6:C4:1E:29:3B:68:A7:5F:B4:D1:80:35:51:28:50
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:5c:d4:a4:be:ce:c9:27:91:23:8a:5f:09:80:71:2b:f9:
53:81:90:6f:d4:43:27:31:52:fc:ec:45:f4:5f:31:8f:94:5b:
09:f4:21:8b:9b:6d:b9:f9:a3:f0:a5:40:a8:aa:7a:a1:d9:fa:
6a:e9:23:e1:e0:fb:9a:fe:14:f6:4d:22:ad:4f:2f:e6:64:01:
2f:70:6d:64:88:8b:40:f8:ea:71:e1:e6:1c:50:29:83:68:1a:
5c:11:d2:61:6e:a8:29:b1:a3:38:e5:30:d2:4b:15:d6:3b:59:
4b:c2:17:79:ca:88:60:3f:ac:69:d0:f2:f7:89:69:64:66:b6:
4f:dc:91:eb:f0:a5:d2:da:88:33:67:29:30:df:45:6f:35:9f:
f7:93:68:f6:02:fc:2c:15:64:86:32:74:e2:f1:09:2b:ae:87:
df:18:8c:05:fe:a9:99:d1:35:0c:2a:74:05:dd:9c:35:ab:18:
d2:0e:54:79:1d:21:95:d7:b5:6e:ee:71:27:85:de:0a:e9:1e:
56:43:b8:03:d7:1f:8a:39:64:b0:7e:82:a9:8b:17:b6:e3:00:
33:e3:18:3a:4c:8e:d2:78:fa:7d:61:07:2e:9c:42:33:38:72:
1f:30:c9:0c:a5:0b:2c:04:dd:51:30:38:27:b7:9c:d5:bf:ab:
bb:0b:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:30:01 2025 by rpki-client