Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: EKxDw6+PqklOee0GjME0xr6zLOMP6ZrI7xZRE1T2oU0=
Subject key identifier: DB:CB:C9:5F:29:07:F9:B1:3C:A4:2E:1C:D0:C6:02:3C:98:C8:90:BB
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019845F66E36A0994B7F3D73D889C0D9FF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 0251
Signing time: Sat 26 Jul 2025 09:00:34 +0000
Manifest this update: Sat 26 Jul 2025 09:00:34 +0000
Manifest next update: Sun 27 Jul 2025 09:00:34 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: thdJeUAE5j4fYzgDC8eil6oXryRfVSet8ZhVX8FgQi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:6e:36:a0:99:4b:7f:3d:73:d8:89:c0:d9:ff:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Jul 26 09:00:34 2025 GMT
Not After : Jul 27 09:00:34 2025 GMT
Subject: CN=dbcbc95f2907f9b13ca42e1cd0c6023c98c890bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:3e:85:62:86:04:d1:cb:1f:9f:ec:8f:bf:
c8:e2:fd:ff:71:78:ec:c6:12:32:15:af:2b:4f:d7:
35:60:3f:0f:28:cb:51:33:99:97:ad:a7:5d:43:0a:
a8:9e:c2:90:ea:8e:31:b6:57:52:99:9f:75:ce:f7:
02:ec:88:22:7b:62:25:11:2b:c4:94:99:34:2c:67:
36:98:d3:47:61:5c:0d:f9:60:fd:de:7a:a4:24:60:
f6:9d:54:63:18:66:bd:4e:16:7b:e5:34:18:eb:8a:
9f:34:72:52:9c:55:ce:ed:54:f2:2b:9d:6a:a4:5b:
f9:cc:ca:f5:8f:77:56:0a:fe:d8:32:69:a4:ec:bf:
aa:88:0e:e2:a7:a9:f0:08:74:7e:22:66:16:6d:37:
e1:70:47:c8:c9:ec:47:3c:cd:30:06:2d:0d:4a:3d:
08:58:ea:3c:52:ec:2f:1a:11:8c:4f:47:14:b4:76:
2b:f7:fc:b6:7f:2b:8f:28:22:6d:ba:3c:86:a2:81:
d1:76:a5:f5:f4:fa:9a:ff:78:95:45:24:a7:f7:4b:
d3:fc:0a:91:47:57:3b:04:6a:e7:67:53:8d:f7:f1:
47:e4:a3:cd:32:02:76:9d:0f:cd:4d:d6:30:f9:66:
80:bc:15:ef:71:af:f1:db:f7:85:6a:66:ab:b6:1f:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:C9:5F:29:07:F9:B1:3C:A4:2E:1C:D0:C6:02:3C:98:C8:90:BB
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:47:23:03:62:38:e0:6a:83:52:ff:f8:20:4c:1a:0a:01:72:
a4:45:8b:d5:f9:e3:25:7e:95:fe:98:18:25:53:69:f0:96:11:
5d:51:5a:69:0b:07:a4:ed:f5:d1:e2:90:7a:a3:d5:b3:96:22:
c6:52:73:bd:54:ae:3a:2a:7d:d4:12:d0:6a:92:1b:17:69:d3:
aa:b6:06:ad:15:57:4d:7e:7f:36:f5:4c:7f:42:dc:b6:ad:78:
d0:ad:c4:b4:86:25:8d:80:78:a5:23:42:e9:15:d1:de:76:27:
a8:aa:28:b1:30:fe:ee:2b:0f:52:32:8a:43:46:ef:3b:db:cf:
de:02:c7:e2:57:ff:33:cf:fe:f3:b1:6f:68:36:37:5b:94:33:
c6:c2:3b:89:d6:9b:28:7a:d3:5e:6a:b9:6b:e9:be:7e:c1:f5:
51:8d:dd:a8:cf:bb:2e:9a:12:56:1f:a6:29:49:a5:d7:9e:d1:
e6:fa:db:db:80:8f:ab:50:4f:17:63:8f:77:36:79:2b:41:46:
b9:cd:bb:a3:c8:4e:94:68:e2:47:ba:4f:0b:34:c6:c4:e0:ce:
1c:c1:36:57:d2:e4:8a:41:1f:b6:bf:9f:7b:00:7a:12:30:b7:
d9:a0:e7:9f:dd:58:63:f9:8f:af:3c:f6:a0:6b:03:05:76:86:
bf:89:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:48 2025 by rpki-client