Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json)
Hash identifier: vvr0ETJPV5SVR/+D0i8fRiZ/r85xzgIiVBx06KXsh/0=
Subject key identifier: 4B:73:D3:67:03:30:94:82:80:BF:B3:6F:23:E4:B3:95:51:B5:15:CC
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial: 019849D3B242F37B9B855D9A8FDD1DB0D5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
Manifest number: 0196
Signing time: Sun 27 Jul 2025 03:01:06 +0000
Manifest this update: Sun 27 Jul 2025 03:01:06 +0000
Manifest next update: Mon 28 Jul 2025 03:01:06 +0000
Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: akApsQPLmM0qQUcfcJR+GkGZ4aQYzwRzPWZrallNyhs=)
2: oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (hash: pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b2:42:f3:7b:9b:85:5d:9a:8f:dd:1d:b0:d5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Validity
Not Before: Jul 27 03:01:06 2025 GMT
Not After : Jul 28 03:01:06 2025 GMT
Subject: CN=4b73d3670330948280bfb36f23e4b39551b515cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:d8:b0:3b:f9:e9:01:0d:c2:f4:17:03:d6:
28:6c:c5:85:ee:59:ea:45:e6:27:65:52:44:2f:68:
b3:36:32:17:52:55:98:14:48:09:59:0f:4a:42:02:
1d:8b:08:ff:c0:59:63:dd:93:7b:8d:da:37:82:49:
c5:17:39:f8:f9:8d:c8:ae:82:e5:b3:70:67:0e:6c:
d1:bd:3b:1c:4c:27:66:d0:e9:16:89:05:b8:9e:70:
67:2b:55:c3:cd:ec:68:d1:c0:cf:53:ed:56:0b:e0:
fb:da:ae:3a:4e:c0:c4:4a:85:c0:0b:e8:8f:96:ae:
70:da:9c:7d:5b:32:a0:33:ca:f7:b0:5c:eb:41:b3:
3c:32:cb:81:17:7c:9f:fd:55:50:09:28:a5:86:a2:
f5:7f:98:88:9c:80:9f:9f:93:29:40:03:c2:8b:a3:
ff:00:72:40:5c:ca:35:39:dd:52:e2:10:bf:ab:d2:
ef:0b:70:c7:23:2e:0c:5c:76:74:7a:00:8d:e7:52:
5d:e4:46:7f:b0:c4:45:83:8f:fd:8c:10:22:09:b6:
dc:e0:8c:5c:5c:bf:9c:1c:13:61:dc:de:8c:3a:29:
5b:f2:7f:46:9a:e8:99:a1:3c:4e:c7:e7:00:bb:ea:
3c:7e:66:15:5b:63:57:20:62:0c:cf:27:3f:9f:4c:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:D3:67:03:30:94:82:80:BF:B3:6F:23:E4:B3:95:51:B5:15:CC
X509v3 Authority Key Identifier:
keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c7:17:38:aa:51:b7:12:c8:cc:60:ef:76:f4:a9:14:d1:94:
0a:0d:20:51:31:ea:46:41:01:2a:b1:6d:7b:a4:80:af:f6:01:
3d:b4:6f:f9:11:33:a8:a4:54:96:1b:e3:17:51:3c:16:13:ac:
ea:0c:7a:51:63:6f:48:15:f3:6a:c8:57:97:f3:c1:34:e3:46:
37:80:db:0f:4f:f6:e6:ac:6a:ac:85:22:10:ae:f2:6d:01:e4:
63:10:dd:01:12:6c:0c:17:60:0d:6a:6c:a3:0b:fa:90:a7:fa:
e3:d3:7e:f8:04:0c:cb:0a:1a:18:b2:12:0e:b9:cf:35:46:77:
80:29:9d:0d:26:66:ae:3a:d2:da:ac:73:9f:5d:89:42:e5:70:
33:85:db:00:b9:68:62:1a:42:c3:d9:49:c1:27:00:57:9d:76:
b9:cc:13:be:43:ef:df:02:92:78:30:b2:a8:1d:24:20:3f:e5:
44:ea:ce:f9:56:89:83:39:1b:f8:f5:e1:28:df:88:ae:26:77:
c0:47:70:79:69:09:93:a0:a7:db:4d:e5:08:cb:50:b6:95:be:
f4:4e:91:d4:95:b1:fc:c4:d3:6e:3e:ca:04:c8:f5:5c:e1:0a:
a0:ba:41:a2:ce:54:ac:5d:88:fb:7e:22:f4:7b:3b:55:75:55:
fd:cf:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:08 2025 by rpki-client