Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: G1T49qufDsGLZxEk9QJlCHSHLErusvabX6MTDNRBNdk=
Subject key identifier: 25:0E:33:48:57:85:4E:3E:5F:14:2C:16:ED:02:4E:CA:1F:D9:DD:16
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 0198D54E158F020D07C9BD87F7F111FC4C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: aCNhudIy9/bt2rgD0N9c+BpjJhdzUwMn8yqG6kNmvLU=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:15:8f:02:0d:07:c9:bd:87:f7:f1:11:fc:4c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=250e334857854e3e5f142c16ed024eca1fd9dd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:27:72:2e:db:05:47:2e:3f:3c:3a:02:f0:
74:8d:ab:2b:35:0e:76:16:c4:75:d8:30:2d:91:29:
0b:45:a1:b0:65:82:04:61:db:eb:a6:ab:2f:a7:11:
67:b2:82:df:d8:bc:23:98:08:a2:cd:c2:ea:f1:d1:
bb:6c:d9:2d:9e:cc:1a:b2:29:80:09:e9:74:a2:c1:
0c:bd:0b:b9:87:6c:16:61:65:ab:76:8f:12:cb:f7:
63:95:8f:8a:e7:b9:78:5b:8e:0d:fd:ec:21:7a:de:
66:0d:84:02:7f:fe:c5:0d:eb:12:5f:6d:c1:f2:1b:
27:08:58:1f:f6:36:72:ff:7e:8d:a1:26:e1:aa:27:
a3:3e:28:9e:c3:a8:ae:5d:b2:0a:e8:b6:d9:3d:06:
a7:d0:c9:e5:4f:10:fa:8a:af:4f:75:11:0b:ca:14:
ae:ea:31:28:0c:ac:6b:cb:e0:9c:96:9f:d7:49:d8:
d8:98:1c:bd:fe:56:41:c0:65:d1:4e:3e:51:be:cf:
24:12:9d:7c:e1:11:40:d1:e5:3c:d7:15:0d:fe:16:
6a:f4:cf:b2:24:79:bc:87:a1:8b:04:57:90:a8:1d:
eb:4f:d7:5d:8e:ca:3a:d8:55:02:64:12:d3:c8:16:
b9:18:e8:f1:47:6a:c8:5b:6f:8f:af:f1:b4:e6:c9:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:33:48:57:85:4E:3E:5F:14:2C:16:ED:02:4E:CA:1F:D9:DD:16
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:8d:af:a1:df:0d:96:95:ea:a5:89:22:29:56:73:b3:68:
55:38:08:42:e4:64:4c:e7:14:b4:d4:13:6f:7f:df:c8:31:74:
90:a8:42:59:68:b8:84:2e:35:27:59:51:14:98:fc:10:03:07:
39:d4:55:35:68:bd:18:82:81:11:e6:a6:e8:89:7b:e7:4a:41:
21:ae:09:53:81:f5:d3:19:34:20:67:7f:f2:e1:17:d5:50:6b:
84:db:cc:3d:41:76:ed:92:53:df:b6:ba:3d:a8:39:ae:fb:11:
98:86:46:0a:8d:e5:55:45:b8:75:10:1d:5e:99:04:cc:6c:64:
da:23:c3:a4:ad:2f:35:3c:fa:44:4e:67:67:2e:42:91:dd:89:
c2:36:0c:94:17:18:a4:35:a5:23:51:87:1a:11:a9:39:fc:fb:
f8:92:6e:4a:d8:ac:a8:83:c0:b0:e1:c1:49:b5:6b:1b:f3:81:
06:be:fe:cb:b4:74:f1:ea:03:a0:91:e8:62:cd:5c:51:5f:67:
81:8d:50:12:07:e9:d1:7a:20:99:f7:7e:53:36:f2:dc:0e:2c:
a0:36:f4:57:a2:72:0a:6f:10:8a:a8:3b:d5:97:76:9f:59:98:
51:c4:6d:94:f9:dd:ae:b2:25:8c:b7:f6:14:83:84:f7:d4:31:
eb:c7:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:41 2025 by rpki-client