
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: AcCEQjF2R7lyEB25cK2Kgu/J4q+94iEa72vhKfjm0S4=
Subject key identifier: 46:12:7E:76:42:D2:84:4E:1E:92:F9:FD:16:3B:1D:3C:E1:12:84:A8
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0198D404E7BD41C56A4C8F9104565542E6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 1106
Signing time: Fri 22 Aug 2025 23:02:27 +0000
Manifest this update: Fri 22 Aug 2025 23:02:27 +0000
Manifest next update: Sat 23 Aug 2025 23:02:27 +0000
Files and hashes: 1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: o1yHgiaVcp6Jmu6r2BGCsNUdpQ7EQ0BrbGY9zPzeeHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e7:bd:41:c5:6a:4c:8f:91:04:56:55:42:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Aug 22 23:02:27 2025 GMT
Not After : Aug 23 23:02:27 2025 GMT
Subject: CN=46127e7642d2844e1e92f9fd163b1d3ce11284a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:9c:fc:52:07:c6:f8:9f:0c:71:43:42:7a:
7c:91:02:41:12:03:8e:93:08:22:ed:79:ba:7e:7e:
e7:26:ff:a7:bf:8f:c6:65:32:17:5a:3e:e2:95:e9:
e7:3b:35:bd:be:ef:3f:bd:ab:ea:98:4a:70:e0:e4:
5b:2b:3a:48:9c:af:6f:70:53:63:93:9b:9c:fb:2e:
e4:bb:14:e7:e0:9e:9c:23:24:4f:01:92:39:b8:7a:
4b:2f:48:8a:b3:bc:a4:1c:96:99:36:7b:b6:19:33:
37:29:2b:67:f6:eb:fb:a8:ef:bc:a5:d5:80:56:b8:
5b:69:63:20:b9:e2:61:89:36:10:01:22:92:05:c2:
f1:ca:39:6d:56:8e:11:d1:6b:62:2d:bb:dc:13:3d:
0e:43:9d:96:d8:4c:b8:d0:aa:d8:66:57:92:c9:7f:
bc:56:76:97:e4:f3:95:00:c1:4b:ba:74:c8:af:06:
eb:5c:25:83:a4:b7:bb:d2:b1:31:99:5b:ee:43:cc:
6d:49:aa:1e:b6:e0:f1:55:f7:75:2b:a0:2e:13:23:
1d:6b:58:b4:50:dc:08:65:0a:d6:20:cf:4e:fb:8c:
d2:18:1d:96:55:e8:c3:68:75:a0:82:8c:06:35:4f:
63:07:24:c4:c6:d1:63:34:86:2d:e7:3d:a3:94:3f:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:7E:76:42:D2:84:4E:1E:92:F9:FD:16:3B:1D:3C:E1:12:84:A8
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b6:66:b1:3f:94:60:d2:5a:18:f6:e4:e7:2b:71:67:6e:23:
09:7a:9b:2c:a5:e9:26:98:ab:20:fc:98:80:a3:2a:14:54:46:
a5:ad:36:4a:a9:a0:6c:a0:99:0c:ec:2a:a5:b3:ae:59:b4:d7:
d7:cb:0e:87:46:41:cf:ec:ee:2c:95:13:99:9e:ad:24:2a:2e:
76:61:5d:09:d5:03:59:f1:b2:99:3e:17:75:34:6f:1e:7e:67:
34:86:9d:cb:8c:b0:cb:c9:95:88:a5:f5:55:70:9b:46:d4:f2:
b5:e9:e5:b5:06:4e:a7:1a:68:33:2b:a8:d2:db:36:11:a8:af:
5f:ad:d9:1c:21:54:b0:99:26:58:01:e0:76:cf:ba:d6:1e:61:
e7:81:9f:55:c9:b3:eb:3a:3a:4b:40:3d:f9:7e:06:5c:78:bc:
bb:da:75:12:90:bb:d8:57:ad:af:22:e3:1e:d7:06:f6:e3:25:
77:41:42:21:ad:9d:84:a4:a2:3d:6f:d1:b9:47:26:6d:b5:5d:
e2:db:63:69:a7:a7:f5:45:37:2f:60:8f:65:3d:a7:64:9a:9c:
8b:50:e8:d3:2e:09:b3:88:59:c1:aa:3b:51:96:92:0e:5b:80:
80:f3:5f:83:4e:6e:87:9b:b7:82:d3:33:71:f7:61:e7:cb:f0:
9e:3c:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:00 2025 by rpki-client