
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: aIO9oDgO1eOFw5FOgfn2n5V3ZC/0E0ajbh3OQP7BrsI=
Subject key identifier: 83:2B:34:77:57:97:67:75:7D:DD:8C:A8:E2:14:4B:79:C4:4E:52:DF
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 0197CDCE9C63EAF289C35B8DF3A291E8D92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1554
Signing time: Thu 03 Jul 2025 01:02:39 +0000
Manifest this update: Thu 03 Jul 2025 01:02:39 +0000
Manifest next update: Fri 04 Jul 2025 01:02:39 +0000
Files and hashes: 1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: o9jbkv0EE4QiPi2TMVlFj5vmT6vAsXDGktgiibIKe0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:9c:63:ea:f2:89:c3:5b:8d:f3:a2:91:e8:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Jul 3 01:02:39 2025 GMT
Not After : Jul 4 01:02:39 2025 GMT
Subject: CN=832b3477579767757ddd8ca8e2144b79c44e52df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:d5:a2:08:26:c8:1c:1f:9c:44:24:78:90:
5a:f8:31:01:52:b9:bb:c8:1a:a5:50:3b:3c:7f:af:
49:7f:be:8a:41:9b:63:3e:2d:76:58:c7:e0:77:4b:
bc:40:54:9f:49:9b:7e:5e:e4:46:a2:51:60:21:1a:
bb:02:8b:22:1c:0d:a7:f4:5b:ef:1d:d3:78:b7:be:
87:37:70:71:9d:5e:12:00:21:7c:2c:a7:5c:b1:df:
e1:70:27:d7:e3:8b:26:43:24:97:40:ea:86:57:7b:
57:fa:5f:79:86:42:45:fd:36:8a:0d:8c:31:cc:2c:
be:a9:96:8a:85:bd:6b:98:db:9a:72:12:6d:db:57:
60:db:18:e4:9f:2a:47:7b:1d:6a:46:34:d3:7c:d7:
a7:ed:f7:77:e5:35:84:d3:68:d5:b4:95:78:51:57:
4d:be:7c:e0:dc:92:cb:2a:0c:a9:67:ad:4a:12:01:
cd:51:28:31:d4:ad:95:71:0f:6f:3b:47:14:a0:bc:
88:05:70:da:95:ac:24:96:5f:e5:2f:1a:b7:01:34:
74:3e:19:81:10:9c:f7:79:1d:d7:aa:e3:1e:28:30:
cc:ba:ca:d0:9a:73:f7:6e:61:c3:b2:20:8b:ee:a0:
15:82:b5:53:80:3e:0d:83:60:f7:b7:36:ba:67:32:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:34:77:57:97:67:75:7D:DD:8C:A8:E2:14:4B:79:C4:4E:52:DF
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:04:08:bf:26:b6:dd:32:35:1a:22:82:33:83:dd:c8:fb:37:
0b:ce:c2:5b:84:1c:e4:c8:17:3a:32:cf:02:07:ac:ed:e1:e6:
ee:35:07:bb:3d:ed:9e:6d:52:e0:c4:af:57:ff:f6:48:89:0f:
9c:38:2f:00:63:4a:db:de:49:d8:64:c8:53:76:e2:8c:4f:2a:
a1:3a:76:ab:09:85:e6:75:18:07:3e:a8:c4:d6:21:32:11:11:
07:94:e3:9e:27:5c:c3:57:81:e2:38:81:2c:46:49:f7:39:55:
fa:51:75:5e:80:f0:9a:33:fa:3d:bc:61:59:1e:43:9f:ad:d3:
27:7b:0f:3f:0b:29:f7:76:24:e8:50:d9:96:e3:a1:3b:6b:f2:
8d:e0:a8:76:4e:25:1b:0b:e9:c6:ca:ca:a8:8e:00:b9:ae:5a:
ab:bb:cb:56:79:16:a3:e3:da:df:4d:a5:6e:0c:85:ac:a1:18:
6b:b8:75:f6:45:2e:71:5d:b7:17:8f:00:8b:a8:96:f8:97:3a:
ae:e9:8e:b2:80:84:cc:40:68:24:a7:4b:bd:6b:cc:c4:0d:89:
74:30:58:a2:9c:6f:94:69:dd:80:aa:69:34:6f:c2:81:e7:7c:
11:d6:31:28:54:fd:8e:dc:4f:44:59:0e:27:67:5e:a3:64:da:
5c:34:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:14:35 2025 by rpki-client