Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: YQxttKWjLuG067DZTT6a1Z+RhVYGgf0iC+TI1bo641Q=
Subject key identifier: 68:D2:E7:7B:F8:9D:65:29:69:BC:9F:B1:3A:42:2F:E0:F3:D9:7E:6B
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 0198D4E0AEB6AE3E6DBFFC8DE40AA7B18254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0BBD
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: JAQHt0qm1qJcQVFW1PQrefabEt65I5TtzB74cy5pW7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ae:b6:ae:3e:6d:bf:fc:8d:e4:0a:a7:b1:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=68d2e77bf89d652969bc9fb13a422fe0f3d97e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:4c:2d:29:9f:b7:4f:7a:d4:55:32:26:36:
0d:b2:2e:51:5a:00:f8:ee:23:db:9d:dc:92:fc:8e:
6b:79:dc:6b:7c:9c:08:71:4e:d7:35:bb:13:8e:c0:
8d:07:01:94:d0:ea:aa:40:eb:81:61:25:b5:53:3a:
6e:af:3e:24:fa:c5:57:a1:d4:56:35:3c:5f:30:64:
36:87:63:3a:33:dc:cf:72:49:b7:56:73:61:0b:c8:
83:b1:a2:39:77:c7:3d:88:5c:37:ff:93:9e:20:09:
46:b4:e3:ed:83:da:38:ff:72:a0:1c:1b:fd:42:70:
2a:a2:78:c3:92:fa:59:97:7d:75:26:7f:fc:7c:3b:
b1:a7:a5:f8:26:24:4a:70:1a:b7:70:67:bb:ac:f4:
b7:6c:cb:85:d4:d9:f8:9a:65:22:b6:bc:c3:42:97:
4e:db:8e:4d:07:5a:30:16:2d:1b:1d:34:e2:69:29:
51:f5:4d:30:48:85:d2:40:28:4a:1e:c6:76:01:37:
28:1f:be:81:fa:88:32:6d:1a:d0:8e:db:dd:ab:ac:
46:41:bf:7b:4d:7e:be:9a:ea:e2:46:33:d9:6a:2f:
9e:91:c3:62:2d:a5:df:08:44:b2:53:36:5b:65:6e:
a7:81:8a:ba:30:28:72:3e:36:df:57:9e:c3:24:f1:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:E7:7B:F8:9D:65:29:69:BC:9F:B1:3A:42:2F:E0:F3:D9:7E:6B
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:c9:3e:30:6c:49:e6:e8:40:0c:91:8b:d0:0e:fd:ab:aa:
36:87:f7:cd:e1:e1:b5:f4:f8:7f:2a:5d:ac:b0:63:30:6b:1d:
aa:78:71:81:49:d1:af:23:4f:0b:c3:ae:42:31:ea:91:3a:e1:
4e:05:46:d7:ab:91:42:91:34:7c:96:99:df:45:27:62:5b:14:
19:59:e4:3e:49:be:0d:fa:35:9c:0a:b8:57:5a:b8:6d:b2:71:
4c:58:b7:e0:24:1e:57:ab:39:8a:fc:86:02:f4:10:df:d7:8b:
61:ff:4f:e8:18:29:be:d5:40:60:25:b5:63:09:4a:02:42:c1:
09:55:64:84:55:d0:85:6e:5a:d8:8f:d0:1c:1e:df:b5:da:3e:
3d:b0:70:59:1c:54:f2:2c:35:53:09:20:51:69:33:0e:e1:2b:
81:41:f7:3a:ba:6c:4b:24:d5:3c:e2:03:2e:fc:90:60:95:a8:
05:3a:96:1f:23:8d:d1:10:32:be:34:b5:a0:95:94:8f:af:41:
ca:b8:d1:03:d6:ec:cb:ba:36:e7:49:ea:50:72:1f:6b:ee:97:
04:33:16:95:63:a7:2e:04:15:a0:f6:47:c5:f9:66:6b:f7:5e:
7e:01:31:4b:70:de:9c:e2:a7:da:6a:a8:4d:8d:f4:72:89:a0:
3a:df:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:03 2025 by rpki-client