Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: O5Gl/S7woU7l10/nSiAlSo204nwnkrhU4D/ePeaqCgQ=
Subject key identifier: 86:75:72:4F:D6:DF:7B:24:C6:64:5D:B5:C6:B9:E6:46:D2:8B:35:93
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019849D36B9CF4656FA861EF212F340AB815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0D20
Signing time: Sun 27 Jul 2025 03:00:48 +0000
Manifest this update: Sun 27 Jul 2025 03:00:48 +0000
Manifest next update: Mon 28 Jul 2025 03:00:48 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: DOaVDocHBzNY6Ir2df83z9Hq8qjWTlkX2e+K3J1uGOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6b:9c:f4:65:6f:a8:61:ef:21:2f:34:0a:b8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jul 27 03:00:48 2025 GMT
Not After : Jul 28 03:00:48 2025 GMT
Subject: CN=8675724fd6df7b24c6645db5c6b9e646d28b3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:61:2d:0b:8e:a6:58:1c:6d:91:2a:c7:90:
b2:0c:f3:35:d0:5e:5a:77:f0:bd:d2:31:3e:5a:b9:
a8:19:c1:71:ff:5c:49:0c:37:8c:13:9d:d5:dd:57:
e0:eb:dc:90:a8:87:58:ec:72:e7:90:5f:0d:be:59:
e4:e2:92:8a:54:d8:6c:8b:eb:5c:30:f6:26:f8:e5:
7c:36:7a:66:c4:5d:f4:a0:34:7f:fd:fc:d8:08:a5:
bc:f0:b2:65:47:df:53:80:59:1e:90:4c:65:8b:7f:
ee:10:6a:c6:17:93:77:f8:6f:04:47:1c:cc:b8:ea:
fc:32:b1:24:5d:64:32:f2:c6:d6:8f:54:39:18:9d:
d3:b4:40:ce:86:d8:95:1d:29:fb:98:37:df:ac:67:
02:19:a4:3c:79:a9:c5:01:2b:99:a5:a7:e7:e3:28:
55:10:de:5b:68:d0:82:c9:fc:65:12:ea:e6:a8:6d:
2d:51:92:0d:27:1c:c7:48:2c:e7:44:29:63:20:65:
a6:2d:5e:23:94:16:90:19:69:4c:3f:6c:77:50:8d:
3e:52:de:bb:94:c8:e7:0e:5f:68:5d:4d:c8:e6:16:
98:44:5f:e3:1e:2c:f7:fd:36:cb:06:ef:4a:7c:9c:
96:80:25:b5:4b:d9:28:ef:9a:17:d6:72:f9:51:71:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:72:4F:D6:DF:7B:24:C6:64:5D:B5:C6:B9:E6:46:D2:8B:35:93
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:3c:64:2e:30:9b:2f:ba:e5:4b:b7:0b:9c:09:27:81:71:
78:96:7f:54:6a:8b:f8:fc:4c:73:9d:f0:34:fc:80:10:2d:43:
81:38:fc:51:5b:63:d6:e8:7d:a6:38:b4:dd:8f:31:d8:25:7f:
52:35:3b:55:ec:0f:9c:21:1b:10:14:2a:f9:3b:b6:fc:45:78:
0d:5f:39:db:0c:51:4d:6e:20:44:d3:75:96:c4:72:af:bd:b9:
70:82:be:d6:07:b5:6d:34:c0:8c:fb:99:6c:ab:59:43:7b:7a:
39:99:51:2c:06:ab:15:8f:81:15:a8:0e:20:1a:18:86:ee:db:
63:f0:94:ee:7d:88:51:04:b7:0c:f2:e9:3e:0a:6a:19:55:03:
eb:ee:89:78:b4:ea:63:72:35:5d:bf:a3:ca:9b:30:b7:ed:83:
98:5f:ca:6b:44:bd:a4:69:85:b9:73:3a:c9:ff:65:21:56:f8:
af:c1:a8:51:65:11:a9:cf:20:65:de:a1:83:b4:bd:61:a7:8b:
8b:b4:e0:4b:bd:d1:2d:8b:14:4a:b6:a0:41:c0:24:2c:11:d4:
ef:1c:6b:8b:e8:41:bf:b5:ae:90:fa:5d:64:23:1f:1f:4e:81:
fe:fc:ae:46:7e:df:ed:bf:5d:08:e8:0f:39:fd:52:1e:66:20:
14:d0:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:18 2025 by rpki-client