Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: 7EtShYqdBLYDCwQqG6vOBPzsKoSdONAyD8mxrhUWkB4=
Subject key identifier: C8:E1:70:6B:3A:EE:72:80:26:F5:59:D3:94:FD:CA:26:E3:D7:48:50
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0198D5BBA00FD87C116F45AC58DE8B95715C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 15B6
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: NH6S4CyR4YKD5MZmtOxZFZ9udH4jyDlaCYCbjhbbJEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a0:0f:d8:7c:11:6f:45:ac:58:de:8b:95:71:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=c8e1706b3aee728026f559d394fdca26e3d74850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:81:0c:3c:55:7d:af:ef:9c:32:2a:29:2d:
d4:75:4a:f0:ee:af:96:2b:9f:73:d4:99:7a:87:51:
21:7d:9f:b0:db:cb:85:a6:9d:99:f1:86:b0:41:e2:
b0:f7:c3:2f:02:37:27:91:16:6b:e9:81:cf:6f:24:
46:ab:fa:f0:c0:27:04:da:0f:d1:36:c7:17:4f:7b:
76:9f:55:28:e1:4e:13:e7:d5:99:6d:2b:e3:e8:48:
88:d3:f3:eb:ee:fb:6b:7b:70:a4:ef:67:d0:ce:9f:
8b:41:e5:62:c1:2c:d1:df:10:09:21:1c:f5:d4:af:
24:1d:ec:71:56:76:41:ff:cf:65:a7:e8:d6:45:82:
78:e0:ed:0a:58:d1:94:a8:c0:b1:e1:bd:a8:2a:1a:
37:cf:43:e1:21:5d:d9:5d:77:b0:8d:42:9d:15:5d:
07:42:dd:8c:18:38:2a:e1:de:d7:4b:b4:40:0d:82:
bf:80:34:fc:21:c1:22:45:bd:29:5a:b2:47:8f:5a:
50:6c:73:72:95:2c:81:f8:8f:6a:c6:a6:d1:8b:9c:
e9:a0:9e:b2:2d:f2:e8:e0:33:ad:e8:ee:ba:b9:0e:
1a:d5:df:3b:20:19:46:cf:b0:5e:26:7d:74:0b:b1:
35:01:58:41:46:d2:28:d7:0b:a6:23:20:dd:ea:ca:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:70:6B:3A:EE:72:80:26:F5:59:D3:94:FD:CA:26:E3:D7:48:50
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4f:54:8c:71:7f:6b:f2:14:85:fe:61:b7:a8:24:1d:8e:1c:
3c:3d:27:fb:28:6e:93:d2:d0:98:3a:e6:fe:26:e1:7f:d5:1e:
0c:d8:54:aa:50:8e:67:0f:af:d3:af:b1:90:fc:f6:fd:03:17:
6c:bb:8a:3c:a4:bb:9d:0f:b7:4f:09:fc:78:d3:eb:68:93:b4:
8f:04:c1:80:59:d1:85:cb:75:9c:14:56:0b:06:42:e8:c0:7b:
e3:ea:ea:15:45:08:99:76:d8:38:12:34:fa:13:7c:75:78:99:
ce:8b:75:bc:de:3c:ea:8e:1e:0a:1d:74:2d:2c:41:62:d6:6b:
16:c4:fe:6c:40:88:d1:16:2d:60:68:da:78:52:68:29:ed:6b:
81:4e:13:c6:1c:9f:dc:08:9c:e0:90:bf:6b:9a:ce:83:2d:83:
ed:94:28:f0:7f:2c:bb:99:c1:dd:b4:11:f7:f4:42:63:5d:3c:
76:cd:8f:b3:34:cf:e5:6a:3f:db:e3:b2:99:e6:0a:1e:b7:ac:
e6:b9:de:a3:2f:cd:64:00:70:39:d9:6f:19:cf:cb:2f:de:89:
a0:cc:12:30:40:d8:4f:d0:9a:eb:a5:03:33:1f:5b:cb:22:5c:
2f:46:76:42:ed:fc:9f:dd:91:56:51:39:cb:da:4d:59:a5:ac:
fa:e5:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:04 2025 by rpki-client