Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: k1SrbPFUgaBsZU3nS6bqt+20DqWZIN+WC547UbPa3LU=
Subject key identifier: C0:F9:C9:A6:2F:23:8C:C9:C5:30:15:AA:FB:51:AB:8C:53:42:B6:AC
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 0198D6CD8DC73F1D8CCC5356F179AF726D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0666
Signing time: Sat 23 Aug 2025 12:00:51 +0000
Manifest this update: Sat 23 Aug 2025 12:00:51 +0000
Manifest next update: Sun 24 Aug 2025 12:00:51 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: eooQ72WmokScZiEsClWCpAeus3Fb2kCG2q7SfukofKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8d:c7:3f:1d:8c:cc:53:56:f1:79:af:72:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Aug 23 12:00:51 2025 GMT
Not After : Aug 24 12:00:51 2025 GMT
Subject: CN=c0f9c9a62f238cc9c53015aafb51ab8c5342b6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:71:bd:8c:8f:55:29:c4:0e:f4:a3:c1:a1:
2f:09:e9:8b:3f:85:c1:5b:9d:17:39:f0:58:2c:ac:
58:17:7c:a4:1a:f0:d6:8e:54:ff:6c:20:14:98:6c:
80:93:cb:b0:94:1a:95:42:f9:a2:9c:d6:01:e3:7a:
85:9e:bb:5b:b5:a8:b7:b0:cf:63:d5:a3:6f:52:96:
a5:b1:6d:c7:7d:53:08:72:f7:42:31:ae:8b:6f:c4:
db:09:1d:40:a7:c4:24:fa:34:0e:40:d4:13:e3:48:
58:ee:b0:ee:e6:7b:88:88:d5:5d:23:9b:c0:c4:c2:
b2:62:fe:b8:e8:24:78:29:9a:d2:c8:b0:76:00:ea:
6f:24:fb:6e:de:a4:4e:14:5f:a4:1e:d4:4c:93:b9:
4f:96:5b:24:68:a3:7f:ec:39:36:9d:49:f5:54:27:
56:da:fe:6f:95:07:de:ba:bf:51:99:4d:6f:b2:32:
64:18:bd:01:b4:7d:c7:4d:2c:e6:37:6d:64:60:d6:
c4:96:09:4d:e8:79:53:40:15:59:4a:64:0f:a0:6d:
9c:11:13:bb:4d:97:05:06:76:de:7d:6d:b5:32:b4:
10:21:2f:8b:b5:a2:3a:5c:b5:09:96:3c:03:10:af:
25:8f:81:cc:a8:c9:1e:01:e7:a3:98:e6:a5:9f:4a:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:C9:A6:2F:23:8C:C9:C5:30:15:AA:FB:51:AB:8C:53:42:B6:AC
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2a:46:73:74:c6:a6:fd:62:35:e4:e7:84:81:89:e5:86:b1:
5b:ea:26:56:98:ee:51:a1:d9:bb:01:16:c1:48:7d:7b:3a:7f:
23:80:e8:bd:49:a1:47:11:1d:31:63:c9:67:98:38:7d:a1:d4:
8a:d0:12:5c:20:23:cb:45:9a:77:e2:23:17:bd:df:a6:c1:5b:
89:a0:64:b7:61:b3:62:99:41:6c:85:68:b6:91:47:b8:ae:12:
d6:44:04:8a:eb:9c:7f:2d:cc:7b:fe:b4:9f:36:2e:25:d3:81:
78:09:8c:ae:52:9e:c1:c6:82:2d:c5:6e:f2:59:52:d2:91:d2:
eb:cc:9b:7c:0f:0f:ca:7a:97:26:66:56:ec:72:a1:0e:a9:4f:
a8:9d:91:2d:ab:d0:c5:b5:bc:34:55:37:77:2e:bc:4d:28:57:
03:3c:ad:58:9f:e3:74:86:c5:2c:f8:80:8a:f0:de:ed:06:90:
45:15:5d:97:cc:15:59:9b:6b:9f:d7:e0:73:b0:e8:b4:1c:4f:
a6:6e:a8:8e:91:2b:62:9c:b6:fa:52:5d:42:ca:55:20:ee:2c:
97:63:d2:2f:1b:14:98:ac:d2:e8:5a:63:c4:53:3d:ee:92:4c:
e7:1d:dc:c1:6a:0b:d3:e0:11:3d:44:04:21:f3:3c:b4:74:f5:
20:02:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:59 2025 by rpki-client