Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: Zt9+4ymAmU3jtqADPpuATyt3lfGCqJ6FPeh9SEANj5Q=
Subject key identifier: 67:8E:C5:1C:8C:09:9A:A6:42:81:72:A1:19:8E:F1:68:45:44:1F:1D
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019848F77A226FCEA2FCD27E95946E8CFD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 1402
Signing time: Sat 26 Jul 2025 23:00:34 +0000
Manifest this update: Sat 26 Jul 2025 23:00:34 +0000
Manifest next update: Sun 27 Jul 2025 23:00:34 +0000
Files and hashes: 1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: 3ofud/QRH47ZeVqmeU189WrqmgcxFE18WrwIyod9Jsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7a:22:6f:ce:a2:fc:d2:7e:95:94:6e:8c:fd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Jul 26 23:00:34 2025 GMT
Not After : Jul 27 23:00:34 2025 GMT
Subject: CN=678ec51c8c099aa6428172a1198ef16845441f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:9b:4d:fe:49:f7:9c:6a:0e:c4:99:01:9b:
04:47:56:55:44:98:6a:13:38:be:e6:af:4f:9f:21:
9a:b8:17:90:8f:d4:21:a6:9a:b4:3c:86:bd:35:df:
a9:38:7f:0a:db:a1:02:aa:b5:4d:d6:d0:c9:4a:a2:
07:25:d0:77:29:10:87:8e:05:3f:44:99:94:81:8d:
db:0f:6d:27:65:64:f1:af:33:e6:0c:8b:d2:e2:b4:
3c:c2:ad:e6:bf:36:ee:7b:04:1e:2a:73:8b:e4:f4:
62:ac:5d:f0:03:81:51:06:27:85:68:f2:ec:cf:00:
40:44:d0:8a:48:f8:1d:cd:c6:6f:03:05:a9:30:16:
d3:53:a7:65:23:7d:9a:4e:02:fe:84:e7:3c:f0:ff:
31:2b:93:81:5c:d2:d8:7a:9d:70:15:65:58:fb:ff:
f0:91:c5:81:3e:b5:2d:78:ea:bf:8a:c3:86:ee:24:
48:24:fe:9a:c2:7f:26:9c:0c:c4:0a:61:bd:83:be:
91:69:78:5a:31:1c:18:9c:f0:9a:8d:87:ff:05:04:
df:b2:77:6b:ab:b5:2a:22:72:94:07:f6:6b:75:8c:
c0:38:30:fc:a6:67:b6:b4:35:ad:c2:db:21:f5:de:
74:6b:e2:97:3b:19:1d:82:a9:55:d4:50:b8:4c:fd:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:C5:1C:8C:09:9A:A6:42:81:72:A1:19:8E:F1:68:45:44:1F:1D
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0e:09:b4:38:22:7f:64:ee:e1:11:ab:e7:92:33:e0:a4:0e:
3e:54:7c:36:5b:f5:fc:97:2b:f9:c3:c9:9e:57:44:43:fa:96:
e1:7a:55:ff:aa:69:5e:89:ab:0e:74:a5:bb:2a:6a:93:a1:2e:
34:32:98:5b:91:4e:12:ef:87:06:7f:d1:36:9e:28:63:5f:9f:
e0:02:f1:3a:8d:16:cd:06:ed:a6:d1:1a:07:d2:f8:1c:68:45:
9d:08:bc:4d:bc:15:0f:84:5e:1a:05:e4:f8:08:ff:c3:83:ac:
a6:07:dc:d9:be:15:80:57:47:15:86:5c:e8:be:21:26:31:7c:
49:86:87:0e:30:ec:cd:68:93:d3:5d:08:97:8a:05:a8:ca:5b:
03:e2:76:56:20:32:b7:1d:81:80:19:2a:d3:d6:d5:91:5f:25:
3b:ab:98:b8:24:d6:79:8f:9b:de:79:eb:45:e4:8a:ae:51:9b:
f9:32:ac:2b:e4:e9:a1:6a:3e:84:ab:20:de:3e:91:39:4e:3e:
44:ff:df:7b:43:ad:54:0b:69:f3:92:c4:e2:56:bb:44:28:d9:
bd:3b:72:bc:a9:e6:38:14:9d:c2:33:c2:64:8b:9b:ad:b4:c5:
1c:61:bb:7d:99:2e:b9:cb:f0:1c:32:de:7a:19:c9:74:b0:d9:
d1:8c:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:20 2025 by rpki-client