Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: 8Yf/7LeZp083vHo/GNFlFUd1DqqwFaOs6//GsGG3HAw=
Subject key identifier: 11:AD:8E:AC:5A:8D:2D:3D:10:35:34:6D:A3:E0:44:87:12:FE:86:48
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 01984A780663DDF9BC0643E51914298BC3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 06:00:36 +0000
Manifest this update: Sun 27 Jul 2025 06:00:36 +0000
Manifest next update: Mon 28 Jul 2025 06:00:36 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: rcqOzkHRYUp+IR/Hr1PJxFMtXbYw53C1BW1M/dxvVcM=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:06:63:dd:f9:bc:06:43:e5:19:14:29:8b:c3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jul 27 06:00:36 2025 GMT
Not After : Jul 28 06:00:36 2025 GMT
Subject: CN=11ad8eac5a8d2d3d1035346da3e0448712fe8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:c7:28:78:66:97:e2:d1:38:55:60:e6:0f:
f8:2e:07:f6:31:10:f8:42:27:40:2b:9a:88:3a:02:
d1:1d:01:75:e2:97:77:35:e6:ca:30:5f:e4:16:7c:
32:a8:69:a9:bd:e8:81:db:52:49:4f:75:2d:7e:e7:
23:4c:f9:03:3e:0d:46:90:26:d1:02:55:ea:36:aa:
6d:da:cf:d4:a2:fb:9a:9e:5d:88:73:83:b2:e5:18:
77:83:10:36:c6:c1:ac:68:21:75:a0:81:d4:5b:f3:
00:e5:c3:34:2b:64:7d:3e:8a:4c:94:f3:72:4f:48:
bd:5f:99:bf:59:14:02:6e:c6:6d:6b:3e:be:69:86:
06:81:2a:d2:bd:47:24:8a:69:01:cb:ca:30:a8:b7:
75:1b:1c:4c:7d:05:11:9b:2d:62:bb:54:90:23:24:
6b:6f:46:cd:e9:a7:db:c0:ad:16:a1:af:a2:75:91:
de:ea:80:f3:71:d1:9b:71:a9:c6:be:8d:5c:b5:c4:
05:3d:19:39:30:7a:fe:b5:82:a4:3c:a2:b6:d4:57:
85:24:3b:60:bf:ca:b3:46:18:1b:0b:ea:b2:47:a1:
e2:4f:9a:b5:52:c3:6b:cc:f7:70:f1:6f:9b:0c:9b:
f8:8d:93:50:a4:8a:c4:db:f9:f4:ff:f5:b4:e4:71:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:8E:AC:5A:8D:2D:3D:10:35:34:6D:A3:E0:44:87:12:FE:86:48
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3d:19:89:29:7a:b8:43:56:11:a6:8e:41:bc:c6:74:f2:c9:
22:ae:4a:95:e2:b1:84:c0:c2:0a:ce:f9:5d:15:73:0c:17:7b:
b9:95:23:65:15:17:81:f8:86:8b:cd:5d:9c:4b:22:8c:2c:d3:
79:b3:56:5d:e6:42:71:9f:02:d7:32:ca:58:4e:04:75:23:5b:
a0:8b:11:33:62:1f:71:6a:2f:87:59:92:0d:dc:1d:3e:75:70:
ac:fe:ca:d8:49:91:02:3b:01:26:9a:be:0e:03:1d:99:ae:32:
11:d7:de:af:c9:ac:0d:18:7e:7c:60:80:cf:22:97:a7:0e:83:
05:8e:32:41:75:27:9b:39:89:83:0b:81:1e:4d:5e:7a:d2:a0:
64:80:c2:47:9c:b9:25:d2:fe:a1:58:e0:02:be:78:b4:41:e1:
d1:2d:55:45:19:10:bf:49:9c:e5:91:32:37:da:44:24:9e:e1:
81:88:2b:2a:1a:f2:58:d8:20:d1:81:32:84:88:12:75:c8:87:
77:b5:e9:73:e5:1e:07:6e:6c:f6:9d:84:e0:67:02:c9:51:ab:
4d:39:f4:08:cb:a8:c4:22:56:b4:ae:09:96:74:c9:60:da:da:
34:84:f3:36:98:02:e9:ec:dd:bd:84:ef:51:51:dd:c5:94:a0:
85:7a:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:45 2025 by rpki-client