Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: 9+Z1K8oCd29tkQTeto8qR11ool3bTOWiMjciKyTSmfM=
Subject key identifier: C5:4F:E2:E5:D7:47:B2:60:3D:52:13:51:02:21:F5:C3:57:DF:1E:6E
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01984B54650F8D112EF4A3F5BA8D0C19B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 131B
Signing time: Sun 27 Jul 2025 10:01:18 +0000
Manifest this update: Sun 27 Jul 2025 10:01:18 +0000
Manifest next update: Mon 28 Jul 2025 10:01:18 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: ht7cNOUHS5TYEaK4N5yNjDW3fKa9xqyofa/JFG2JSfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:65:0f:8d:11:2e:f4:a3:f5:ba:8d:0c:19:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jul 27 10:01:18 2025 GMT
Not After : Jul 28 10:01:18 2025 GMT
Subject: CN=c54fe2e5d747b2603d5213510221f5c357df1e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:e6:1e:7b:a3:0c:6c:98:3c:01:c0:1e:57:
68:8e:ab:55:c2:fe:fd:c7:72:15:05:3c:23:17:98:
e7:c6:67:69:51:fe:90:f0:06:2d:85:b0:17:03:85:
e6:4f:19:1b:ca:62:7f:ee:f4:3c:55:da:e3:94:ad:
bc:6a:74:ff:49:be:23:3d:3c:1c:ba:90:e6:fb:0c:
2f:ef:10:bb:97:a1:3d:61:11:a7:98:34:7d:c7:68:
39:55:5a:34:7d:37:9e:6f:cf:d3:cb:a2:ca:79:d5:
13:82:16:e2:c4:40:a1:cb:3e:95:11:ea:df:e8:9a:
96:09:60:82:74:df:a4:f1:cb:a4:83:4a:82:a1:c8:
5c:a5:bb:21:04:3d:65:7e:64:b9:91:61:19:5a:f4:
44:e1:9e:98:0d:ec:5f:42:b6:b8:9c:b3:b7:3b:6a:
ee:4b:03:4f:e4:a8:5e:da:44:5c:e7:94:65:ac:95:
8e:5f:57:09:2b:2e:b5:bc:fd:05:58:b2:0a:a5:1a:
e6:8f:f3:33:88:05:20:26:cd:b5:a4:81:47:8f:18:
8d:aa:fd:9d:54:8a:be:cd:ab:66:16:64:5c:10:51:
46:14:45:0e:01:07:58:9c:98:82:86:47:77:3b:2f:
04:37:9c:a6:1b:72:f1:25:5f:0f:46:13:f9:5b:6c:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:E2:E5:D7:47:B2:60:3D:52:13:51:02:21:F5:C3:57:DF:1E:6E
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ee:82:ea:39:9b:41:2c:50:f7:80:d7:2b:02:64:0a:80:32:
6e:87:99:8f:d3:cb:8c:93:3f:ba:82:ac:38:20:83:27:f5:df:
a8:fa:26:06:67:b9:be:50:0b:04:74:4b:d7:2e:0f:49:a9:cc:
05:00:07:60:57:4c:78:bc:30:22:2f:ea:fa:af:a4:9c:ea:7d:
00:f3:d2:8d:4b:4c:de:82:4f:8b:2f:84:52:a7:50:59:19:74:
72:0f:ef:35:20:e8:e4:e1:89:96:5f:e9:39:8b:c8:78:13:60:
3b:52:d5:f4:c2:a3:2a:66:36:16:49:57:bf:bb:6c:77:2a:cd:
05:5a:f2:12:22:4c:cc:fc:ac:20:5f:ca:e5:b9:d3:77:c0:13:
78:da:7f:4c:9f:47:be:5d:fb:1f:24:81:e0:44:a4:43:99:9a:
1e:82:92:b4:90:21:c1:b1:ce:64:9f:1e:68:81:3e:e7:f3:d5:
51:9d:0a:42:10:52:e1:ca:ec:86:78:87:29:cd:a6:89:91:30:
55:c8:7a:78:06:72:bb:b9:8a:70:d9:4f:d7:b5:42:fb:1e:8d:
c0:44:0d:af:a0:2a:0a:1b:32:bf:80:6a:71:5b:dc:ab:6b:bf:
98:b5:b5:1f:90:27:18:bd:51:8a:1c:59:e7:17:aa:92:d5:13:
53:66:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:11 2025 by rpki-client