Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: LwMLStXRGeoCUgZl7dHwVcgbj5vKtgCEn8tsrYMVCLQ=
Subject key identifier: 78:48:74:58:AC:96:DB:A3:55:37:E9:9F:3B:24:2C:98:AA:49:84:66
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 01984A4169D4D8ACFB36EF724386C3B91675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1065
Signing time: Sun 27 Jul 2025 05:00:57 +0000
Manifest this update: Sun 27 Jul 2025 05:00:57 +0000
Manifest next update: Mon 28 Jul 2025 05:00:57 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 6QEmD/YxjsqnjcurHKKastTGu+IH9aBrfIvRgDETzjk=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:69:d4:d8:ac:fb:36:ef:72:43:86:c3:b9:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jul 27 05:00:57 2025 GMT
Not After : Jul 28 05:00:57 2025 GMT
Subject: CN=78487458ac96dba35537e99f3b242c98aa498466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:3e:36:77:84:0b:23:56:8c:55:9d:7f:7f:
6b:c4:27:f0:03:ed:fe:de:47:63:f9:ab:bc:7c:e4:
31:e1:71:99:27:b0:9d:ec:9a:86:6e:42:21:bc:34:
3f:8d:fe:7d:40:bc:0a:76:91:1f:62:66:2e:13:7f:
4b:e7:ff:68:72:36:51:4b:ce:18:3c:66:c7:a7:3d:
73:6e:44:e0:4d:c1:d2:17:c0:9f:5e:62:45:f2:af:
33:a0:65:f1:bd:5b:e0:fd:12:8d:14:9d:47:7e:0e:
ac:bd:8d:fc:ed:8e:47:c9:40:df:6c:60:e1:3c:74:
cb:c5:d7:6e:30:62:2d:e4:92:d9:7b:14:e0:1b:12:
bd:af:66:aa:40:69:34:7d:df:e2:63:9b:87:5d:37:
67:e2:1c:e5:ff:3b:11:1c:95:83:68:98:d3:7d:80:
07:81:92:5b:ec:24:de:de:59:af:b9:0e:e1:56:54:
cc:09:31:24:89:a1:19:c0:87:3b:3a:e4:08:6d:7d:
69:e2:5f:50:27:2d:9c:7d:c2:d8:35:8c:62:db:cf:
f3:45:5e:96:e5:41:5a:6f:cc:82:7a:97:21:10:2f:
69:06:b9:cd:95:f1:54:da:14:95:2f:53:4f:fa:51:
58:20:76:2d:f2:02:6e:74:61:a0:1e:01:97:a5:cf:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:74:58:AC:96:DB:A3:55:37:E9:9F:3B:24:2C:98:AA:49:84:66
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:90:2d:6a:65:85:ca:fa:f4:88:57:c1:8c:64:52:02:a2:
4d:5c:90:5b:e5:09:7c:98:69:ad:bf:e4:eb:1e:27:fb:20:44:
4a:15:85:9b:73:5f:1f:2f:17:84:89:cd:34:51:49:0e:f9:d1:
ba:09:54:85:bf:b2:cf:ac:56:d3:81:46:e0:c1:40:96:82:9b:
6d:74:db:9a:50:5b:02:c3:c5:7c:30:78:c4:ce:6c:35:98:d2:
4a:d4:49:03:f5:05:af:a7:c4:9b:ee:db:b4:29:1a:e9:47:34:
15:e8:69:28:94:46:0c:8c:b7:09:41:83:bb:07:72:e7:bf:19:
b4:c4:a6:e9:6a:05:7a:46:f4:18:13:bc:ed:7d:5b:38:41:0c:
6c:a0:4c:7a:dd:6a:33:09:19:68:e2:c3:30:c3:8c:b7:ca:c5:
5a:dd:be:70:5e:b5:97:b0:61:ff:8e:0d:aa:07:9c:b0:34:0d:
90:e1:72:dd:75:7f:77:d5:9f:16:55:4d:80:5e:cc:56:14:71:
cd:be:38:f8:a9:75:64:99:c8:3d:ad:e8:95:dd:c1:9b:2c:57:
76:12:07:93:c7:9a:0c:a5:fa:ac:8a:e5:95:f9:30:2b:95:74:
5c:ba:8a:fd:39:21:fc:bd:7f:32:4c:4c:2b:0e:42:4d:99:d7:
24:76:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:18 2025 by rpki-client