Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: XK+VrE86hJut37lLhVmlGpVMHg/a8xiA+LzNPjDKtQk=
Subject key identifier: F0:29:91:2F:75:2D:0A:0B:B2:E2:37:38:68:EF:09:6E:EA:36:72:A7
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01984407E4D89EAD90AA12E5BE717E90FBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0BE3
Signing time: Sat 26 Jul 2025 00:00:24 +0000
Manifest this update: Sat 26 Jul 2025 00:00:24 +0000
Manifest next update: Sun 27 Jul 2025 00:00:24 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: VjiTBiLkdMFoXVmmfqI/w+GUFTY5iTSw/9zs0PdURgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:e4:d8:9e:ad:90:aa:12:e5:be:71:7e:90:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jul 26 00:00:24 2025 GMT
Not After : Jul 27 00:00:24 2025 GMT
Subject: CN=f029912f752d0a0bb2e2373868ef096eea3672a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:82:b8:75:6a:9b:05:d9:2f:b0:62:d2:15:
02:5c:da:c3:c0:1f:66:31:52:0e:9c:ad:4b:a1:b6:
68:fb:3b:b8:73:13:d9:a8:9d:c0:39:15:24:fd:10:
0e:be:e3:ea:3d:31:3c:04:86:bb:8c:2b:ae:90:77:
c4:24:55:ba:35:94:1f:36:24:e8:12:16:fb:d5:06:
e5:3b:e8:dc:65:08:b9:19:7d:7d:2b:10:f2:9d:2d:
e5:72:c7:1c:32:16:12:11:21:05:af:d9:93:49:55:
77:d3:25:f8:7e:fa:a9:1c:d1:87:6b:0b:97:d2:03:
f3:0a:db:e3:6b:91:d9:25:5a:64:c2:ae:ad:85:e7:
b0:c8:ab:41:53:bb:13:06:89:a3:91:e2:d4:c0:c2:
22:4b:6d:f0:d1:64:e8:4c:1d:6f:6f:fd:f1:58:35:
e8:fe:a4:1f:c8:c5:6a:68:2f:91:08:40:63:f3:5c:
a5:e4:dc:1f:9d:ef:98:42:5e:a8:43:d7:6b:eb:0e:
e0:1b:de:20:6f:8a:48:af:48:59:0a:7d:bf:fc:3e:
82:c9:74:96:34:15:48:f7:62:08:39:1b:2b:8f:cc:
10:ef:f2:ff:28:75:e2:ae:4f:55:fd:68:78:e0:25:
8c:db:38:c4:c4:87:5a:1f:c5:c8:33:36:49:6e:78:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:91:2F:75:2D:0A:0B:B2:E2:37:38:68:EF:09:6E:EA:36:72:A7
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6b:07:21:2f:81:11:7a:ac:48:a6:98:10:58:a9:64:56:b7:
96:7a:81:f2:26:be:94:c0:d9:19:25:97:b2:3d:f7:14:b0:47:
08:91:97:9d:12:d3:ac:54:da:4c:02:1b:fd:20:f2:c7:31:30:
a1:c7:5a:10:7e:63:70:8d:9d:f6:40:00:3c:61:54:90:12:ed:
07:34:ed:eb:18:9a:06:1a:02:30:79:4b:3f:54:e9:b9:45:31:
9c:3f:4d:f9:b8:f5:25:0d:70:ca:5c:f4:74:a0:01:1f:2b:2f:
c3:84:58:04:2f:40:32:bd:a6:17:8b:f2:f8:49:48:86:d0:b2:
c7:34:ca:18:f7:91:69:c0:13:84:26:f8:0f:09:b3:81:f5:06:
be:7e:9d:44:eb:af:c7:74:7b:11:29:6c:b3:87:18:4d:e9:9d:
5b:aa:36:92:86:99:af:f2:53:d5:99:0e:6e:07:dc:95:75:b5:
58:93:ec:16:f1:c4:f3:6c:be:b6:43:05:d1:a6:4b:66:bd:0e:
8c:4f:0d:9b:24:c9:c8:be:fb:60:5d:0e:47:24:4e:ea:df:ec:
dd:22:74:86:25:ce:68:77:13:ce:0b:3a:2d:31:b0:fc:1d:af:
7d:66:0e:41:0c:ad:80:91:63:c0:d7:fa:b4:c1:f2:74:98:9b:
67:1b:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:40 2025 by rpki-client