Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: Y6zxNicJsupFkPKmYuI3FcPqnS6JlPOlj1aibOGAQCs=
Subject key identifier: 8F:E9:F2:D0:47:FF:D0:94:CC:99:39:B4:A1:3C:14:66:3C:5D:EE:94
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 0198D54EA5D1CEF1A700D1BC6FDF1FC3A1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: fVEScEuy08mq8/st9dzF5lswDTkvQLw1nsDp9VC4TUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a5:d1:ce:f1:a7:00:d1:bc:6f:df:1f:c3:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=8fe9f2d047ffd094cc9939b4a13c14663c5dee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:4e:47:f7:c3:aa:a4:c8:eb:60:09:31:44:
d6:6a:13:d1:3d:85:ea:2f:b7:4d:4e:02:d2:55:78:
35:7e:b8:7a:24:c6:62:56:c3:7d:da:fe:0e:14:cf:
e1:8f:73:01:d5:05:dc:9e:28:79:91:71:4b:50:95:
d9:4a:7d:bb:ee:69:02:41:f5:a6:2e:eb:89:39:89:
82:53:46:c1:6e:9d:db:e7:1b:54:41:e8:88:77:67:
ca:35:1b:60:26:f6:8e:12:84:ee:6d:64:c2:64:3e:
01:fa:16:c9:e2:02:5a:b4:ab:35:71:34:d2:32:7b:
7a:ec:74:aa:d7:83:5f:41:c6:0a:67:e0:c4:ea:5b:
83:c7:24:54:91:70:aa:76:27:ae:6e:e9:2c:22:06:
30:2c:cc:02:9b:ed:3a:28:09:7f:31:38:3d:d7:a5:
1d:e2:a7:41:ac:f6:06:40:56:52:7d:c7:6f:7c:b0:
36:d0:55:2c:eb:8a:30:ea:0f:bb:8e:77:ed:95:c1:
cd:52:98:08:43:ae:34:2e:2c:a1:90:76:d3:ea:5f:
d9:1c:63:b2:b9:b7:50:7c:6d:d5:88:d5:f4:29:03:
74:fd:d2:4e:c7:13:6a:fc:0f:41:e5:9f:f1:64:40:
eb:99:42:a6:42:d0:8d:ad:be:d5:9d:cd:5f:47:ab:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:F2:D0:47:FF:D0:94:CC:99:39:B4:A1:3C:14:66:3C:5D:EE:94
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:8c:0b:6a:28:36:ed:a5:07:e9:cb:c0:2c:84:13:96:d1:
db:7d:3d:d8:a9:37:06:4e:4f:a2:51:0c:c0:df:3c:10:6d:7c:
a1:ab:c4:81:e9:42:bb:54:12:41:25:70:43:c7:e3:fc:48:17:
54:61:a2:7f:63:2c:1e:54:e8:3e:8f:25:c9:aa:47:76:56:7f:
f0:08:86:cf:fe:a6:91:38:67:78:de:2c:c5:45:20:76:9a:7f:
8c:58:7c:70:68:14:01:14:5c:b5:8b:9b:66:60:00:6b:0f:1f:
45:58:53:7e:61:e9:15:d8:b3:67:41:f1:08:c3:17:92:45:1b:
30:86:a4:42:05:3d:84:f3:ac:50:df:dd:e4:6d:23:72:e9:d9:
a9:e0:c2:41:41:39:f6:6a:9b:14:44:fe:30:32:51:1f:94:33:
80:08:15:25:43:22:59:0c:ac:a1:37:16:37:fe:8c:c3:f4:85:
b7:98:c0:c5:e4:9f:ae:92:cc:c6:ef:13:f4:88:66:86:f4:a8:
37:5d:5c:d6:9d:19:1e:1f:d7:ed:2e:c1:eb:de:66:6c:af:7e:
b0:8d:55:7e:83:ce:c5:2f:bc:bf:eb:09:dc:a8:31:23:14:d5:
5f:43:b9:48:29:d4:11:13:47:a0:5b:29:5b:c5:09:b5:48:a5:
dc:80:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:56 2025 by rpki-client