Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: Z/O1k2z3IE2a7T3kPXVBtnwIjqNNiprDw/kgQggT10Q=
Subject key identifier: 9C:90:0D:89:D0:0F:61:E5:64:F3:09:64:6F:6A:6A:1E:84:ED:3B:E1
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01990C73C6E728044F41269C868F54E39732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1665
Signing time: Tue 02 Sep 2025 22:02:18 +0000
Manifest this update: Tue 02 Sep 2025 22:02:18 +0000
Manifest next update: Wed 03 Sep 2025 22:02:18 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: zKWQ/3/h0jTpM84AD/G+tb21ISlcd87nDMGKe6WSMyg=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Sep 2025 22:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:73:c6:e7:28:04:4f:41:26:9c:86:8f:54:e3:97:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Sep 2 22:02:18 2025 GMT
Not After : Sep 3 22:02:18 2025 GMT
Subject: CN=9c900d89d00f61e564f309646f6a6a1e84ed3be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:ae:ff:15:fd:e3:e2:ed:2a:85:cc:1e:3f:
9e:5f:b3:8c:91:7a:13:cf:30:a5:b3:e1:7d:f2:5c:
6f:35:3e:0c:27:d6:4b:6d:a3:db:06:71:23:65:57:
c6:1e:43:96:8e:86:2c:06:c1:8a:bf:bf:8e:74:39:
2b:b5:9f:d4:13:13:1a:56:3a:54:46:8e:59:1e:3f:
90:de:ec:d5:9a:ad:44:86:e5:f6:1b:f7:58:5f:27:
b2:c5:e3:be:78:ca:45:7a:fc:de:8a:7a:0d:70:d5:
04:b2:5b:f5:b7:8c:b5:dc:cf:75:bf:47:9a:17:09:
b5:d1:cc:b3:15:ac:29:d8:15:43:30:85:cc:2c:52:
e0:2c:88:64:fd:79:57:99:01:5d:c2:a5:27:67:7e:
96:79:f8:dc:23:5a:6e:aa:d0:1f:1c:6d:ab:cb:75:
f3:d9:f7:2e:ee:31:6c:22:bf:11:63:61:19:9a:59:
bd:41:e3:e1:85:3b:59:8d:72:74:4a:07:f6:28:48:
fd:bf:1b:a4:ff:0a:4d:29:e6:b2:b4:fd:00:9d:0b:
20:48:ed:bc:2d:a0:00:93:97:71:cd:4b:a7:52:2b:
93:a4:e6:aa:2c:26:92:fb:15:ea:ba:26:f7:ff:47:
11:9a:04:2b:37:cb:e2:35:27:eb:2a:7a:7c:0e:76:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:0D:89:D0:0F:61:E5:64:F3:09:64:6F:6A:6A:1E:84:ED:3B:E1
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:06:5b:79:ce:56:d3:85:e7:ba:f6:d1:a8:10:7d:f0:d5:
75:b8:37:34:31:23:73:47:52:dd:5d:ad:60:21:92:db:13:85:
52:23:e1:07:a0:b8:43:9a:fd:0f:e3:30:63:d2:88:32:22:ad:
25:d0:07:cc:fd:de:b5:cc:8a:f0:60:a5:71:65:02:c2:bb:b8:
57:f2:87:2e:d4:6b:06:e3:c2:cd:3b:48:0d:0a:c9:c3:6c:d8:
ee:08:35:5d:67:7b:92:1b:9a:f2:95:64:b8:91:f3:80:cf:05:
aa:05:c1:6b:b4:cb:57:5f:0d:8e:04:59:f8:3e:3d:30:e1:78:
02:54:b8:68:c1:66:68:47:68:b1:9e:83:ef:64:29:4e:4e:a2:
9a:43:ae:de:bf:36:01:a7:ad:aa:8e:34:01:22:35:46:56:78:
45:7d:f3:5f:20:d9:e7:9a:91:62:fc:5b:11:89:8a:87:a0:d5:
c4:85:75:4f:92:ca:0a:d5:02:33:28:1d:26:11:ab:cd:3f:b8:
d3:7a:6a:31:85:4e:1f:cb:8b:80:ae:fe:34:37:9e:d4:bb:00:
eb:8f:75:c6:8b:75:b1:42:ad:37:f2:84:3e:72:1b:77:4b:2b:
86:d3:d9:18:72:d9:c6:3c:98:1b:d0:0a:b3:3d:49:62:b6:95:
76:ae:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 06:39:04 2025 by rpki-client