Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: IRC+z6cbuSBQrABcO5PDNzXZnfip4ORqvYLDMd4d1mM=
Subject key identifier: 9F:77:F7:DD:1F:A9:DF:00:33:B2:2B:BD:8B:99:08:31:39:F5:98:DF
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 0198D4DFFC3A47EC1D200372210178870020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0A87
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: yL2lBAVizIZG962PKbq4xouuJmfxbXGdLRWmhH94sEQ=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:3a:47:ec:1d:20:03:72:21:01:78:87:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=9f77f7dd1fa9df0033b22bbd8b99083139f598df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:12:9b:ac:71:42:5a:1f:12:ec:e7:9d:65:
29:1b:0f:83:2e:38:d4:04:0b:37:c6:7b:e4:b6:6a:
15:81:bb:26:e6:e1:4d:e7:84:b9:ec:09:da:8b:e1:
38:c4:3a:0e:de:86:09:dc:1f:5e:71:92:44:3c:2c:
d1:7f:d6:a7:31:23:83:60:17:78:74:cd:00:6f:c8:
d2:f1:6d:94:10:bd:5d:cf:a7:f8:4a:19:85:a2:2c:
05:5d:3a:75:25:c0:f5:19:d7:04:7a:5d:19:ca:b5:
47:03:c0:21:8a:bc:6d:b7:be:62:0f:fa:7f:54:1c:
29:e3:b6:d8:80:bc:9b:00:c6:06:6e:20:24:62:7b:
a8:42:41:d7:b4:d0:ef:bc:c7:4c:d7:c3:87:dd:fb:
ac:98:42:f9:09:e2:79:da:03:06:7c:45:e3:5c:b3:
46:c3:9c:98:c8:33:da:40:67:2f:2f:80:47:72:6d:
de:43:99:4d:83:5f:35:94:08:64:47:23:d8:f1:a6:
5d:c0:69:7a:8f:6e:c1:de:26:a8:95:91:33:2c:24:
05:45:35:19:a5:cd:ef:fc:24:ba:7d:89:a9:d0:34:
31:6a:73:ff:b8:8b:82:f6:d7:a3:d4:62:73:ea:4c:
35:74:2d:2a:4a:3d:4a:24:3e:20:86:4e:55:7f:5f:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:F7:DD:1F:A9:DF:00:33:B2:2B:BD:8B:99:08:31:39:F5:98:DF
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:26:14:af:d1:65:2f:4f:ff:a8:97:f6:ac:49:0d:7b:b3:
1f:8b:17:70:5d:34:d7:13:9a:e8:30:c8:16:4c:3a:6a:1f:13:
e6:22:b9:62:13:78:3f:2b:0f:51:d9:9d:de:76:0f:f7:68:c1:
1c:71:97:d9:1b:33:75:ae:3d:c5:67:b8:e5:0b:db:ef:e2:20:
85:55:17:c9:a6:83:39:1d:69:42:bf:ed:33:1d:dc:57:fa:35:
df:77:98:b7:c8:53:c2:3f:e8:60:95:41:7d:c6:8e:16:d4:f3:
e1:28:7a:16:b8:f6:f1:86:52:84:bc:86:4a:20:71:5c:f5:f5:
d4:f0:77:bf:cd:c2:fd:c5:05:4c:33:62:b9:67:43:f1:1b:6e:
c3:e2:c2:f5:3d:3e:f6:7a:09:4f:fa:da:91:ae:6a:59:b5:97:
41:0f:bd:8c:dd:84:5d:d4:c6:04:b8:a2:3c:ae:b3:23:a7:a5:
ba:a4:2a:bc:b0:81:c1:9d:26:80:46:ed:fd:9e:36:15:a6:81:
5a:84:b6:e1:70:ab:96:db:2a:4a:f7:87:5c:a6:45:03:d5:25:
d5:3c:3e:20:b6:54:c6:77:97:dd:f0:d0:9a:d2:f9:ea:83:f0:
40:20:af:56:1d:46:cf:53:0b:d9:61:5d:a6:d1:9c:99:77:49:
95:40:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:58 2025 by rpki-client