Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: G5JLW4/vX/Q5r0KY+2g+EMt6xrgmnI0GOZKN/36r2Pk=
Subject key identifier: AC:BB:D1:B2:4B:EA:71:1E:CB:25:E4:ED:3C:D0:E4:60:D4:F5:D1:13
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 0198D473A108F9019A1B8E2980306FE9E666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0A6E
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: Aa/zGP2ug4Ni4hoXnkSoIJ5DtUuA53+SoIN88pRAvno=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a1:08:f9:01:9a:1b:8e:29:80:30:6f:e9:e6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=acbbd1b24bea711ecb25e4ed3cd0e460d4f5d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:5d:67:af:f8:94:35:e8:64:c3:a5:b2:26:
df:64:5c:4d:51:e5:eb:ad:f8:fc:54:a3:cf:38:c9:
d5:45:5a:09:d5:a1:44:81:24:fc:dd:d2:6f:a0:be:
75:19:9b:20:08:69:d3:92:8b:f7:32:44:10:11:25:
3f:83:cd:5b:7c:38:02:75:6e:48:7e:86:b0:3a:93:
00:46:16:a1:a0:9f:a9:e2:ad:1e:e6:32:a3:67:0c:
df:bf:2b:c7:93:c2:74:a3:c7:ed:e1:d8:32:33:c3:
36:fa:5f:cd:7e:13:cf:0c:7f:8b:79:0e:0c:bd:e2:
bc:fc:b3:bf:4e:de:5e:d6:8e:58:93:4e:06:67:ac:
c0:b4:62:79:52:87:d9:84:e6:0b:19:e5:54:4b:1a:
65:a2:97:82:c8:5d:a1:52:9e:8e:dd:54:4a:ce:8d:
5c:ec:6c:07:72:91:ef:4d:fa:e3:d7:0a:2a:70:c7:
e7:ec:90:15:64:e0:44:15:5d:5d:35:37:a8:fa:95:
cc:5c:68:52:e8:49:d2:dc:ff:73:46:10:55:e5:9b:
e7:ec:97:cf:89:ae:9d:63:41:96:72:78:40:59:7d:
9f:a1:7c:8d:e1:ab:b2:60:97:7c:fc:ea:93:80:58:
dc:73:31:eb:3f:bc:75:13:68:fa:1b:2c:3e:70:dd:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BB:D1:B2:4B:EA:71:1E:CB:25:E4:ED:3C:D0:E4:60:D4:F5:D1:13
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:a3:9f:a2:fc:11:f8:1b:96:18:3b:74:37:a1:ba:a0:ed:
e6:3c:c8:12:37:5d:d7:96:ef:7f:08:09:b5:04:d8:d3:b1:2b:
01:3e:fa:01:64:27:76:92:a0:3d:39:59:48:72:ab:b4:39:a2:
66:1e:70:be:dc:f5:d3:bc:ea:ef:29:2b:a7:b8:49:19:d9:90:
68:93:02:bb:59:66:4d:b3:30:10:5d:a0:0f:fe:0e:8f:cb:00:
fa:b4:0d:bb:5a:6b:a2:1a:ca:b4:00:0d:10:23:1a:fc:c4:9f:
55:95:cc:a7:c5:a0:6c:32:8e:0b:bc:ca:9d:a4:5a:c5:73:f4:
88:4b:f3:76:06:a8:70:98:af:a9:f5:b5:e1:81:15:79:1e:f5:
eb:68:53:f8:a9:d6:0d:81:f0:bb:d0:b3:83:0e:71:ef:1a:d7:
da:b2:ce:35:ad:6a:3c:98:ea:71:d8:ef:ce:d3:f0:0b:cc:7a:
72:28:89:cb:a7:be:b9:30:ff:90:37:0b:ae:84:56:e4:1b:09:
ac:4c:01:52:9b:46:09:3c:cd:5f:80:92:21:2f:a5:a0:fb:0e:
87:4f:75:ad:77:4d:4b:88:da:28:f0:e1:00:44:f4:a8:8b:f9:
b3:ac:e8:9d:dd:f0:33:fb:4a:41:c6:aa:b0:f7:4c:2b:24:3b:
b8:9d:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:39 2025 by rpki-client