Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: Gw4vsWEL6/E0IyhufHBMbgI/4tdoNrF02XgiR03dL7Q=
Subject key identifier: 7A:5B:62:C9:BF:D7:CD:A2:28:EE:33:93:68:80:05:40:0F:73:B2:98
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 019922FA9F9C57459EF304F80BFB43839484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:01:13 +0000
Manifest this update: Sun 07 Sep 2025 07:01:13 +0000
Manifest next update: Mon 08 Sep 2025 07:01:13 +0000
Files and hashes: 1: 8x6SWTgZKaQldoz2iRV_QSdqbtg.roa (hash: LzTLrE8ZLdriPR/s+lretToH9KQur6QiGymJnQCIGiw=)
2: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: RgFLGKQV6Z+m6zv3q7sDVHrgmqen+lyAgEPMsMxkJ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9f:9c:57:45:9e:f3:04:f8:0b:fb:43:83:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Sep 7 07:01:13 2025 GMT
Not After : Sep 8 07:01:13 2025 GMT
Subject: CN=7a5b62c9bfd7cda228ee3393688005400f73b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:1f:5c:69:fe:39:9b:c9:b5:1c:4a:92:45:
60:66:67:0f:e3:15:b0:84:9f:e0:8d:56:e6:30:26:
85:5c:80:a9:71:94:8c:49:9a:69:61:6d:48:77:07:
68:a2:e6:c7:47:be:0e:aa:61:d9:44:0a:b6:f1:15:
51:05:b6:b6:7a:8b:fa:e7:3a:c8:34:c2:f5:bb:98:
07:ea:6d:e1:b1:11:dd:36:88:63:55:93:1c:ea:87:
49:b8:80:eb:55:cf:ab:0d:e8:d7:17:a8:90:f8:01:
92:fb:36:6b:45:45:49:a9:b1:36:62:16:46:d8:d7:
f7:83:df:da:da:1d:85:db:2d:dd:fb:01:14:70:1e:
6f:12:ee:6f:4a:52:ef:a6:27:2b:68:a4:27:ca:d3:
7d:08:81:d9:7d:b3:78:79:f6:71:f2:ab:c9:70:ef:
ed:24:e7:e1:b5:9d:c6:4f:7b:59:19:d7:84:0d:97:
f5:ff:1e:1f:22:6a:e8:d3:dc:f0:cb:93:ea:1d:ed:
89:2e:df:84:d1:ab:bc:02:a1:43:3d:3a:de:19:ed:
e2:77:45:49:cc:bb:b9:89:97:0a:1a:be:71:42:a8:
00:d1:3d:90:b7:f4:7c:4c:80:ce:6e:2f:9a:f9:c4:
19:cb:24:1a:46:2b:c7:81:52:5a:a7:33:3d:bc:40:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:62:C9:BF:D7:CD:A2:28:EE:33:93:68:80:05:40:0F:73:B2:98
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:b4:11:2f:9e:a2:00:56:f3:fe:20:33:ef:d7:4e:80:72:
46:51:91:ea:7a:16:77:50:fe:3f:a1:ce:93:a0:1d:e1:bf:17:
8a:17:92:3d:62:ca:18:43:aa:7a:ef:3f:fc:e8:bb:b3:35:3e:
b7:a1:61:83:c0:3f:02:11:f4:1b:82:4c:7a:ca:a5:fc:08:0d:
ff:05:ec:26:cd:a5:fa:36:98:b6:42:aa:12:ca:f1:8f:e4:1c:
36:fa:c0:63:e5:b9:19:04:40:2c:7b:16:e9:7f:31:9c:74:fd:
61:69:01:93:64:82:a1:c6:7f:14:a6:0c:e0:b2:d3:2f:8c:80:
6c:6f:34:e3:6d:0b:fc:9c:fc:64:db:e8:63:ad:a3:96:d5:62:
20:66:bb:85:f8:98:58:7f:8c:ad:15:0c:70:9e:8f:e0:de:81:
ab:35:9e:15:f5:72:bc:2b:84:f1:cb:50:bd:3e:56:a1:de:43:
ae:6d:e0:b3:2c:9b:4c:71:63:b5:cd:45:28:a4:ea:bc:29:95:
c8:02:d8:a6:3d:10:1b:39:d2:1b:79:6a:29:9e:89:d3:15:08:
15:05:28:11:76:17:f7:7c:c7:da:13:be:6f:16:48:f8:3c:c4:
38:fb:3a:83:f6:45:18:d7:66:a8:dd:74:ac:4d:4e:b9:4b:61:
c7:aa:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:22 2025 by rpki-client