Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: k9ltI3yek6Ra0RCMQ89s3noflWaKv0Tz6+4upvmcHBo=
Subject key identifier: 04:05:88:C3:61:9B:AD:21:E3:35:42:A5:2A:AA:A6:A6:5C:4F:C1:46
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 01984A7799ADE18841C7A893615C29FBF9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: NvGF8IacPjJhsCnObSPrcxb8HPbbL4nzsXpDB6l+G18=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:99:ad:e1:88:41:c7:a8:93:61:5c:29:fb:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=040588c3619bad21e33542a52aaaa6a65c4fc146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:3f:2b:55:b1:75:90:45:48:f7:35:6f:33:
25:19:ba:f6:fb:49:7f:f7:01:bf:c6:0e:d8:9e:5a:
ba:59:12:40:9e:57:04:14:3e:69:c4:0b:c4:90:8a:
55:6b:03:7b:a8:5b:75:a1:d4:a3:bc:31:d4:cb:3c:
38:23:06:55:8a:7c:51:77:52:cd:da:d5:17:05:7a:
4b:50:d6:fa:90:17:b9:32:95:66:05:d3:5f:0d:a4:
2b:35:9f:0a:2d:dd:9f:0f:18:04:3f:5e:31:e8:8e:
77:c3:ed:15:ce:9a:a1:a6:78:ef:08:d5:08:72:ae:
25:03:59:c0:c6:14:87:d1:fe:44:65:46:86:b5:6f:
e7:7b:75:eb:19:a9:bf:be:08:73:ed:0e:dc:c6:f5:
65:39:42:20:97:d6:ca:1f:0b:f1:f9:36:89:a2:9a:
9f:0c:96:9b:fd:78:c4:49:b1:18:e4:a1:6f:5b:8e:
a3:e5:b9:ca:de:7e:63:77:c1:96:82:08:6c:ae:d6:
bb:7f:e8:30:73:52:d6:8f:c1:d7:e8:29:84:e9:08:
95:57:64:3f:35:94:b6:fd:24:0c:fa:bd:2a:02:98:
bd:84:30:a5:40:22:db:85:dc:72:da:1f:4d:03:c0:
b8:e0:6b:ff:22:f2:1e:20:97:fb:38:14:20:f9:de:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:88:C3:61:9B:AD:21:E3:35:42:A5:2A:AA:A6:A6:5C:4F:C1:46
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:b4:72:0d:e5:0b:f6:12:cc:5d:b1:40:41:7e:3d:a3:49:
c5:23:b4:26:fb:f9:02:57:b0:af:04:22:93:fa:77:13:a2:ef:
31:60:6f:0d:89:58:ab:37:15:91:5f:61:66:4b:9d:34:e4:c7:
9a:f3:a8:33:45:3a:fd:21:3a:5a:d4:47:88:f0:27:e4:eb:54:
1b:3d:c0:b8:9d:a1:f0:6b:3b:48:de:fc:f7:df:3c:31:07:c8:
e4:d1:ff:2a:9b:c9:d9:e9:a7:aa:dd:1a:9a:e9:07:eb:96:f2:
a2:f2:51:62:42:b5:04:4c:22:bf:43:51:7c:4a:06:0d:35:f0:
fe:4f:86:f1:3a:21:e1:49:e9:af:f8:c3:c3:a8:f9:8c:43:16:
ee:78:ff:b7:a1:f7:45:9d:8d:e1:4c:d9:eb:23:d2:31:0c:16:
7b:14:4a:1f:4a:9f:2d:97:19:52:58:a5:bd:99:b8:3f:4c:63:
07:d2:a6:95:12:e2:c9:db:2c:10:70:6b:24:a4:71:f4:66:7c:
ac:03:f3:b7:b9:4b:44:b2:a2:53:2b:80:14:e6:37:b8:b9:f7:
ee:84:3e:d2:01:6d:b2:6b:ad:cc:e4:4a:30:05:21:4b:2c:81:
a6:b9:5d:29:16:53:db:c0:41:f8:38:35:d3:bc:12:7c:cf:4b:
5b:6c:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:43 2025 by rpki-client