Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: BNC+ozVPZ/a65PfIGKMVOlhcIPAgKpVHwoCKFG6gSWQ=
Subject key identifier: 74:D0:F5:C3:37:CC:43:3E:82:AA:DD:56:FC:E9:EE:7A:58:CA:4F:1C
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 0198499C237080030C1FE5AE234AAEFA2AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0C19
Signing time: Sun 27 Jul 2025 02:00:26 +0000
Manifest this update: Sun 27 Jul 2025 02:00:26 +0000
Manifest next update: Mon 28 Jul 2025 02:00:26 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: D1JhwAZo9/D06WDj597r72I5tuE5/cPhtiCiHkUD8ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:23:70:80:03:0c:1f:e5:ae:23:4a:ae:fa:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jul 27 02:00:26 2025 GMT
Not After : Jul 28 02:00:26 2025 GMT
Subject: CN=74d0f5c337cc433e82aadd56fce9ee7a58ca4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:c1:74:4a:28:a5:4a:00:28:4a:80:70:d8:
16:39:35:17:f9:7f:88:b7:8a:69:fb:4e:45:56:3a:
f6:08:9c:6d:41:c8:a5:13:5e:e4:1a:1e:1d:56:ec:
87:94:8b:f3:cf:07:30:8c:f3:3a:04:11:6b:8b:3d:
c7:c3:32:16:ef:1b:fc:c3:42:78:1a:28:61:c6:ca:
29:4a:b2:6e:1c:e1:9d:cf:03:2a:5b:8f:2e:c0:51:
b6:d7:91:1d:29:c5:9a:05:4e:9f:75:be:91:4a:ad:
13:03:76:bf:2d:cc:68:81:94:54:fc:63:88:54:35:
4b:64:b8:83:f7:ce:50:9b:b9:b7:f6:c8:7d:eb:67:
7d:44:55:f6:f8:05:e9:c4:82:9c:41:2f:38:94:14:
42:50:ce:6d:8d:32:32:dd:c0:32:e7:ee:e3:70:82:
5b:24:ea:d5:80:54:66:60:51:d9:54:d9:d9:8c:39:
c1:ba:36:5d:f8:6e:e0:0a:08:8b:a0:54:fb:9f:40:
ad:1d:9c:71:54:3a:34:e0:62:a0:df:64:65:6a:b9:
6a:c2:d6:46:e0:38:a6:95:57:8a:e5:d2:c6:ef:53:
a1:d7:b2:96:f5:74:f8:32:c7:b7:98:95:43:c2:9a:
55:46:14:80:43:c5:66:27:e5:2f:49:36:54:e7:07:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:F5:C3:37:CC:43:3E:82:AA:DD:56:FC:E9:EE:7A:58:CA:4F:1C
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f4:3f:55:5c:38:d6:76:81:0e:a3:ef:d3:47:0e:73:3d:9c:
9e:63:d9:e6:3f:87:22:3b:54:0d:98:d2:a8:1e:80:bf:cd:fe:
a3:a2:c4:47:42:e5:29:e7:93:f2:cd:0f:97:65:8f:5c:d4:ff:
56:18:9f:3e:f4:eb:18:92:68:2b:c5:72:15:01:0e:3e:6a:43:
40:f6:48:6d:a7:31:63:f1:7c:37:a6:87:b5:b2:54:bf:01:54:
39:b1:78:7e:e4:d6:04:e5:c7:3d:d5:7f:b1:8d:46:d2:76:a6:
94:7d:b2:c5:c7:45:e8:e5:9d:0a:0a:2b:fa:04:03:68:70:19:
da:38:4c:54:ba:b3:58:5e:f4:36:0b:33:2e:3b:45:ab:3e:9d:
3b:26:f6:e7:72:c9:51:2e:58:78:d8:71:38:a5:aa:55:ab:ee:
05:32:de:f3:60:a1:91:9a:92:15:32:90:44:9a:bc:44:69:17:
df:5b:1a:32:04:da:c9:89:6f:16:9b:35:97:8b:78:fd:0c:a4:
67:6e:4e:fb:85:2b:2e:09:03:58:4a:f3:e7:56:70:c8:28:60:
e6:6b:45:37:fb:12:ca:eb:fb:22:bb:1e:a4:96:73:ab:46:26:
54:cb:58:ad:46:4a:15:4d:03:32:1f:fe:60:0d:92:6a:ef:1a:
9b:7a:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:21 2025 by rpki-client