Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier: 3KtwFRjal2E3CtKPS0rAFdEGui/lL4lx64wwkk85n8o=
Subject key identifier: 17:77:9B:50:2E:40:DA:07:14:F3:2F:3B:D9:F9:D1:53:27:CB:F8:20
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 0199221E9E843684EC786AE8B622784E482E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number: 05A7
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=)
2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: NxTArInYSE/Zl2aM/BW3aMuYKcxPayLmbsGlcwsaYtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9e:84:36:84:ec:78:6a:e8:b6:22:78:4e:48:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=17779b502e40da0714f32f3bd9f9d15327cbf820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:0b:c5:1d:04:a7:2c:4f:b9:6e:a1:c3:e4:
f8:91:15:02:c1:18:4a:74:3c:32:08:f9:a4:58:20:
1b:e8:d7:4f:a8:f6:ec:be:ee:7f:99:df:f9:1b:14:
0f:c5:6f:c4:1f:24:56:0d:0c:9a:09:69:e6:e4:da:
17:c5:07:14:8e:96:f0:ef:ca:8a:9e:f7:d7:92:68:
f5:01:0b:2f:fa:c0:7c:1e:1e:d6:2f:ed:25:10:21:
15:62:de:7d:8b:a1:09:a2:46:d7:83:69:c2:db:59:
9c:5c:fd:b3:31:3f:98:c7:b2:7c:4c:44:fe:e0:f3:
dd:8a:74:8c:8e:05:77:37:db:e5:8a:83:9a:a3:46:
93:e7:16:ec:33:31:ce:36:bb:04:26:07:a4:30:df:
85:0e:aa:55:fe:31:86:1d:2e:f7:7c:4e:38:fe:1c:
e6:54:d1:a3:15:20:6b:b3:4e:30:c9:4a:b8:4e:f6:
8d:4a:63:3d:1c:0a:ec:97:45:4d:8e:d1:0c:b7:33:
bc:f0:39:93:04:4e:b8:38:72:ab:31:fb:a1:36:b3:
cc:8d:19:38:49:04:b8:63:c5:1f:64:95:59:4e:46:
43:51:68:c6:d1:9a:9a:00:c3:0b:d2:f5:ed:e4:b1:
db:21:6f:84:5a:be:60:5a:23:99:0c:50:74:c4:ab:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:9B:50:2E:40:DA:07:14:F3:2F:3B:D9:F9:D1:53:27:CB:F8:20
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:87:e7:37:ea:5e:f9:c5:ff:53:52:ee:7b:ad:b4:d2:11:
1a:a1:2b:7b:8f:1b:a9:d1:ce:8e:ac:0e:a5:29:e4:ca:ca:08:
ce:86:22:b1:0d:1b:4b:56:99:e0:22:06:b9:68:16:3c:e0:49:
c2:ad:cd:b0:32:f4:f1:7f:50:99:29:82:fc:c6:a4:47:15:d6:
dc:5d:91:3d:bf:dc:b3:88:59:17:63:85:ca:bc:fe:e1:02:bc:
86:ee:ce:03:a1:09:68:18:43:19:8e:4d:78:bb:82:1f:98:78:
4d:a0:8a:3f:6a:fc:2d:96:fd:ad:cb:6e:a4:66:aa:66:8c:ba:
06:95:bd:b1:b1:a4:2d:bc:f1:b7:ef:ff:38:fd:7f:4e:45:64:
cc:e2:4b:02:38:19:18:33:97:ea:6b:19:e0:fd:e9:2d:09:84:
6a:06:b0:22:9e:15:3f:ed:72:aa:cb:74:38:c7:d9:99:c3:48:
00:d2:68:98:47:a1:8c:4b:c1:70:6f:cf:7c:2c:eb:6f:2e:86:
3c:09:e2:4b:25:a2:22:bc:27:5d:89:f9:bb:d9:d3:65:97:39:
dc:0c:b7:b7:ce:14:ea:ea:60:45:8a:b0:a5:06:06:30:01:57:
fb:9c:77:62:16:8d:ee:9e:f4:4c:fb:13:31:af:80:9d:9c:0d:
16:db:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:34 2025 by rpki-client