Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: sAFqno7weQ6RWvRIXaJ1sDx5KrzSnj3abFRMyvuemjw=
Subject key identifier: 5F:E5:7D:51:01:3F:1E:16:74:CB:DC:59:8F:6C:21:E3:B5:01:AA:61
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 01985AC83A4EC0CD4D561AE787D06BC0D226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0649
Signing time: Wed 30 Jul 2025 10:02:08 +0000
Manifest this update: Wed 30 Jul 2025 10:02:08 +0000
Manifest next update: Thu 31 Jul 2025 10:02:08 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: KbZIxTrHbolLskrBq0JDEfklMO7VkvqEfplIJnRa6DY=)
3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:3a:4e:c0:cd:4d:56:1a:e7:87:d0:6b:c0:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jul 30 10:02:08 2025 GMT
Not After : Jul 31 10:02:08 2025 GMT
Subject: CN=5fe57d51013f1e1674cbdc598f6c21e3b501aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:7e:5b:9c:7a:97:bc:fc:85:47:f3:db:9b:
e5:61:bf:d1:8e:cc:a9:4a:9c:fc:71:3d:68:3e:64:
fa:12:39:aa:f7:47:f4:38:95:fb:79:ab:9b:57:17:
25:6c:0b:d2:63:90:20:fe:d0:d5:c8:87:ff:65:03:
77:0e:5a:26:db:db:43:c3:d6:cd:0c:2f:d4:55:c9:
5d:a7:59:93:99:7c:07:43:63:44:00:2f:11:a9:5a:
ea:ba:33:b1:32:17:1c:92:cf:7b:be:00:3b:62:0c:
e4:d1:98:fa:c6:3c:0e:2b:88:e2:85:c1:1d:18:de:
da:74:6d:64:00:44:88:43:b8:e0:e2:2d:d8:d8:c0:
34:ba:51:61:60:ed:02:c4:ba:0e:b8:67:b9:00:26:
01:24:45:18:fc:f2:1e:16:ef:9f:a7:a4:7a:6c:d3:
e6:49:a0:9b:8d:14:81:bf:d2:48:40:01:d5:be:c6:
6e:39:7a:21:8e:ec:98:00:b1:f6:d8:98:64:3c:be:
e8:4c:97:8a:1b:fe:aa:2f:c2:27:8b:5c:25:f6:f5:
75:5c:65:5d:16:c1:71:e8:2d:b9:f5:90:54:65:0d:
fa:d0:f9:5f:17:b0:1f:ef:1e:c7:ab:3e:6d:d9:18:
80:e1:48:c2:78:c5:c4:62:c2:5d:a4:7d:30:95:f9:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:7D:51:01:3F:1E:16:74:CB:DC:59:8F:6C:21:E3:B5:01:AA:61
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:49:a8:e8:f8:1f:81:60:8a:c8:08:ee:fd:5d:5f:ea:21:
f0:cd:41:ec:02:84:bc:f6:cd:7e:b1:3c:1f:77:45:3f:97:77:
6e:0b:bc:11:41:f9:37:3d:56:25:24:46:56:6e:44:83:a4:16:
2c:bc:af:89:c6:93:49:6a:da:60:17:3d:77:9e:1b:19:ae:e0:
54:e1:88:86:51:d1:8f:cf:30:f3:74:af:90:64:7a:d4:ca:8a:
fb:50:36:ba:5c:71:9c:b1:03:a4:50:56:29:09:aa:2f:9a:a6:
ef:da:16:67:c1:74:0f:ed:b0:25:26:7e:3e:b3:01:b7:e4:75:
79:bb:7f:a5:e9:16:5a:75:cd:0a:f3:00:52:6c:fb:9d:9e:4c:
eb:77:32:a9:1e:6b:85:8c:03:45:35:77:27:87:a0:c2:bb:fc:
38:92:47:0a:22:65:d8:a0:e5:95:20:d0:43:ea:34:b8:a4:36:
67:2a:e3:f2:44:d6:da:49:61:5a:b0:2a:e9:11:6f:33:47:16:
80:15:f8:f2:3c:94:a9:66:7e:ac:ba:19:ef:74:f2:2f:9d:82:
c7:86:22:f4:83:86:f9:a0:60:d5:e4:45:ff:0f:84:80:c7:2f:
cf:4b:f6:60:35:56:af:26:aa:9c:c4:ba:7c:41:24:de:3c:03:
80:67:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 11:33:26 2025 by rpki-client