Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: u3DEWC3g+9LWmKIRFoAJ0N4+rfoTux7rbOq7LCnBlHc=
Subject key identifier: 5C:16:0F:DC:31:36:DE:4A:96:A0:28:42:03:29:CF:EC:77:CE:7E:DB
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 01984A77A5DE2485967E0ABB8A8E51FCDBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: fu7rRvauH5uT7eLcfYYREvGzz9UaaQh9iXQ0GJX5qrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a5:de:24:85:96:7e:0a:bb:8a:8e:51:fc:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=5c160fdc3136de4a96a028420329cfec77ce7edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:f6:65:86:cc:ce:69:53:d5:63:6f:22:20:
34:74:81:1c:f2:fb:26:6a:a8:65:9e:2b:40:2d:25:
18:07:a1:11:08:a3:ce:e9:66:02:4a:8c:7c:31:86:
48:79:5d:8f:21:3e:fb:aa:e3:d1:3c:d9:6f:b9:6e:
4c:87:5f:b6:c6:b8:74:82:de:f3:8a:84:15:31:99:
db:b1:2b:d1:67:62:34:67:ee:8b:1a:15:d5:6e:c0:
fa:9b:d1:70:18:96:1c:8f:69:76:c5:cf:c5:98:67:
37:de:cb:e2:69:5c:65:6f:a9:bf:0c:3d:b2:91:2c:
bf:16:b8:36:8c:d8:60:97:4a:bd:dd:2e:0d:c1:10:
4d:02:0a:89:04:d0:41:ff:24:b5:b5:4f:c6:78:c3:
96:74:36:f9:a7:9a:17:ec:d0:da:48:1b:c9:be:65:
8c:1c:98:ed:6a:de:e9:25:4f:5a:86:0d:7f:22:1b:
b0:eb:e8:ee:8c:bd:ca:cd:64:27:5d:0d:32:4d:ff:
52:de:d6:6c:01:70:b7:62:78:56:a8:d1:b6:1d:20:
6e:43:ff:4d:10:ec:7c:ff:13:df:cb:c4:15:e6:43:
ef:f4:33:c8:e3:ac:db:4f:1f:88:b0:9a:fb:b4:88:
01:ed:14:09:d6:3f:bc:53:b9:53:e1:82:06:a6:cb:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:0F:DC:31:36:DE:4A:96:A0:28:42:03:29:CF:EC:77:CE:7E:DB
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:18:e2:c8:87:d9:24:59:28:88:50:51:24:b0:c0:f1:50:
fc:ab:f9:e5:f6:9f:0a:7c:bd:f8:6a:1a:45:08:bb:4f:13:b0:
9d:19:14:b8:28:40:c4:0a:70:b2:10:e0:ba:3a:23:93:15:3e:
3c:9e:be:85:87:71:32:e5:15:62:02:58:47:cb:6b:86:00:64:
94:5b:81:5a:9f:8a:fc:c3:08:50:d5:58:9a:e5:b1:65:3f:56:
64:0f:83:22:36:4f:5d:fb:ef:6c:b3:c5:cf:de:8c:e2:ed:f1:
58:94:82:0b:59:96:6c:4e:a1:42:c3:87:a2:69:51:bc:4c:07:
c9:84:fa:2f:a7:86:d9:2e:00:b5:3d:de:e6:6d:f8:10:34:72:
8f:e9:40:b0:95:09:33:72:2b:db:02:b4:9a:78:c6:fd:23:74:
8d:2f:70:f0:bc:22:4e:b4:4a:28:5d:27:ec:27:ac:aa:04:d4:
5a:9f:65:80:05:09:3d:35:41:12:dc:17:63:50:41:9d:55:90:
27:c0:bc:22:8b:6b:8a:cf:42:ca:79:b4:aa:d9:2a:8c:cb:95:
33:f2:c0:e9:f6:a1:56:30:15:9b:24:3d:54:2b:28:00:d2:5d:
a2:08:10:07:54:96:b6:c2:7a:cc:68:48:f0:95:5b:b1:0c:4b:
6b:48:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:47:03 2025 by rpki-client