Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: 3VjAmnwibrntYMxgDUi3VPLSG60dp0HkJdTlvAI+ZLE=
Subject key identifier: 49:0B:B1:DA:E1:70:C0:27:03:8E:4A:60:95:B9:45:D6:99:41:12:15
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019838A84F6603578BE829BA016B11B22334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 03F3
Signing time: Wed 23 Jul 2025 19:00:11 +0000
Manifest this update: Wed 23 Jul 2025 19:00:11 +0000
Manifest next update: Thu 24 Jul 2025 19:00:11 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: syTsLToYcmOhU/wvTirRSmwNOwGnbF0SfNrLBoiORPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:a8:4f:66:03:57:8b:e8:29:ba:01:6b:11:b2:23:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jul 23 19:00:11 2025 GMT
Not After : Jul 24 19:00:11 2025 GMT
Subject: CN=490bb1dae170c027038e4a6095b945d699411215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:80:d4:4c:14:f0:dd:c9:4a:65:33:48:8d:
07:7a:e2:b7:fb:11:b8:13:d1:5e:2a:35:6c:89:bb:
7a:eb:33:cb:d4:68:81:2b:5c:06:15:9c:a3:87:ec:
87:31:03:5f:c3:48:b9:34:d6:8d:29:70:f9:61:43:
ab:be:c4:40:b0:be:ca:1d:0d:cc:48:33:ac:b8:20:
5a:29:6b:f2:08:6e:b9:93:b5:58:82:3e:ea:88:ee:
37:18:1e:2c:4a:30:f2:cd:8e:14:3b:1f:43:74:36:
05:b2:2a:89:1d:9c:ef:e0:69:f5:46:70:36:e1:e3:
9d:b6:ed:26:3b:d3:f0:f5:22:3b:dd:e0:68:4a:f9:
f0:78:f4:d6:a0:57:5c:ec:96:b0:e9:9d:e5:fc:67:
b2:b2:24:8a:cc:64:61:95:5a:8f:00:02:5d:9b:93:
fb:a7:3d:54:1d:78:82:1d:27:29:82:14:05:89:93:
5e:09:98:0d:67:26:7e:8f:4c:90:96:b7:9a:63:c0:
06:08:49:96:0e:62:a9:42:98:0f:2a:e5:cd:c1:2f:
01:4b:5f:17:5d:58:df:74:3b:61:c0:7c:d8:d1:e1:
b7:9a:2b:56:18:74:a7:16:0b:47:97:92:97:1e:17:
50:11:08:0f:e9:2b:d8:d2:22:b6:f7:93:2a:8e:82:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:B1:DA:E1:70:C0:27:03:8E:4A:60:95:B9:45:D6:99:41:12:15
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:d8:26:d6:d5:39:a7:8a:67:99:9e:ae:e8:40:35:bb:6e:
2a:c7:94:8b:28:93:54:0f:d3:af:2b:8e:f8:cc:d9:65:9f:38:
f9:f4:bf:a0:e8:ce:ce:3f:78:b3:77:ce:ca:2a:15:a4:a5:36:
01:a9:a4:d5:a9:c8:5a:53:56:ea:de:e9:60:47:4e:9f:d7:bf:
2a:fb:de:2a:19:9d:ea:67:b2:18:ee:07:ab:46:a3:e5:60:b0:
5c:f1:92:67:04:b0:af:ed:5d:94:3f:96:16:cc:51:05:23:a7:
8c:a8:c4:7d:f1:bf:4b:81:b8:97:09:46:79:08:ff:4f:6f:f8:
5d:22:95:b7:46:3a:3c:1d:87:f9:05:c2:82:84:0a:e6:d0:cc:
01:3c:12:8a:d8:f8:41:ba:27:7d:f5:c7:4a:23:9e:4d:fe:12:
88:7c:f5:eb:fc:8f:2e:02:c3:a5:4f:44:fa:5f:56:5a:bd:c4:
07:d8:a7:eb:47:44:ee:2b:89:05:f6:85:67:87:9f:5e:d8:28:
10:f5:ee:c1:f3:6d:49:d5:99:67:89:3b:74:50:81:2c:8b:2d:
85:8b:6f:0f:1a:4f:51:95:f2:43:be:e2:8c:b8:a8:d0:0f:ce:
f7:2d:a6:5b:7b:e4:22:12:22:f7:7f:a9:a5:a4:25:f8:e2:7d:
35:ea:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:21 2025 by rpki-client