Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: 1cDYIeEYzeor/u0IGll1XLguYaso9/9gv9DoYIrJ/SE=
Subject key identifier: F0:B5:D9:CA:A3:E3:96:48:94:7D:9B:60:F1:D8:B9:F6:07:60:CC:8B
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 0198D7A8D3621D28C0ECD726E86B6056D0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 0FF5
Signing time: Sat 23 Aug 2025 16:00:22 +0000
Manifest this update: Sat 23 Aug 2025 16:00:22 +0000
Manifest next update: Sun 24 Aug 2025 16:00:22 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: 87EI/Ky4hC+2YecWMQ2NdjEjxYDvRjpuU40r84WzbyM=)
2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d3:62:1d:28:c0:ec:d7:26:e8:6b:60:56:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Aug 23 16:00:22 2025 GMT
Not After : Aug 24 16:00:22 2025 GMT
Subject: CN=f0b5d9caa3e39648947d9b60f1d8b9f60760cc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ee:ad:9a:c0:97:69:52:ab:b3:bf:a9:65:f8:
48:ca:98:df:4a:30:51:47:5a:b7:4e:02:3c:e8:db:
c7:42:88:8d:55:e0:2c:4c:13:fc:86:b4:49:16:3a:
3f:ad:78:ab:63:c7:1e:74:e4:88:e9:f6:b5:fa:8c:
7f:13:3c:a7:71:82:54:a4:93:50:85:fa:68:a4:ee:
20:06:09:a6:88:6d:a6:b6:13:09:de:02:1f:50:6e:
1a:d0:5e:fc:e5:64:6f:09:fb:6a:c5:30:b0:65:6e:
d0:29:f0:82:c3:64:2f:82:99:28:86:9c:8a:e1:39:
16:9e:03:db:af:ee:1b:c3:b0:d0:1d:5c:6d:f1:7a:
c5:1e:48:f7:af:61:19:34:0f:78:f6:42:0f:ae:56:
bf:8d:d6:7d:ab:27:d0:9a:ec:b3:8c:54:05:71:e2:
98:90:d3:e2:7b:4f:87:3d:e9:cb:e2:95:43:46:c0:
12:dc:7a:9f:d4:62:6e:24:6f:54:71:55:32:f2:52:
46:ba:4f:7f:08:da:de:1c:6c:83:84:12:d7:f5:21:
dc:e7:1f:93:cd:36:54:7d:5f:ad:2a:d8:48:14:23:
3c:7d:62:fd:4b:3b:79:23:32:36:02:a8:fb:30:ba:
79:02:8c:3c:ee:61:3e:73:33:7e:fc:13:05:d1:7c:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:D9:CA:A3:E3:96:48:94:7D:9B:60:F1:D8:B9:F6:07:60:CC:8B
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:d0:28:5c:c5:6f:c4:5a:fb:01:e1:09:00:56:80:93:85:
e7:95:da:3a:3a:95:d7:99:0a:c8:f6:9f:8e:f0:53:94:e6:fd:
bc:2a:34:23:e1:02:1c:ec:f4:47:4d:b8:33:14:4a:1e:de:c6:
b0:8e:a8:75:f8:a1:cd:37:64:46:df:d4:ef:ec:e2:d7:a2:09:
21:0c:d7:67:8e:8f:d5:99:46:d8:df:07:12:76:e6:10:1b:18:
61:eb:64:c6:6b:34:72:60:04:e2:b1:db:a3:7e:fc:08:34:b8:
19:0d:07:ae:cc:36:e3:a9:db:67:9c:50:77:fe:cc:3c:3a:d6:
df:f9:69:54:f7:3e:1c:24:1a:c8:b3:73:a2:78:df:93:08:5b:
70:fa:92:db:82:3f:fd:90:ad:ad:fc:fb:6d:41:ad:dc:0f:60:
51:30:63:d6:0c:86:68:4e:55:27:91:e5:bb:16:f3:a4:68:e2:
42:94:b7:1e:d2:61:17:a5:3a:85:0e:b1:05:e8:79:45:7b:72:
7d:2d:84:0c:b6:d5:4d:bc:cd:4e:b1:5d:43:d4:75:1d:c8:38:
1c:a5:2c:48:d0:b5:1d:05:f0:a1:a5:d0:04:c3:6f:49:7e:a7:
83:e6:ed:71:d4:73:db:3a:8d:1a:48:3b:0a:09:09:54:23:b8:
a7:34:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:50 2025 by rpki-client