Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: AIcd78ecP+xk5QIe2lMejzRiYm3qrPCWN/nprJsk0oY=
Subject key identifier: B8:5A:DF:3C:6B:75:A9:1D:1C:D4:71:06:E0:D9:94:C9:2F:50:7C:FF
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0198D404B3FFAEF0C46915F3F6BB2871E628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0EAF
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: J6tEDMfWaXbEa7yMKhm2WvThY0b+Wsx6vrRnKlVv2p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b3:ff:ae:f0:c4:69:15:f3:f6:bb:28:71:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=b85adf3c6b75a91d1cd47106e0d994c92f507cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:2b:6c:6a:cb:15:fe:14:a8:ba:ae:5c:4b:
cb:19:5f:ee:1f:86:9c:ab:f7:0c:fc:94:24:e3:7c:
e1:de:f6:de:b7:4f:20:70:fd:91:61:6c:29:43:03:
3f:b0:06:e8:0a:c0:42:f5:62:6d:5a:6a:4c:13:b9:
dd:74:8e:79:8f:d7:a5:5c:51:c7:60:af:8f:05:6c:
ad:6c:93:50:d6:f7:1d:11:a8:a9:a1:64:d3:09:6e:
59:5b:c5:49:6d:0d:9e:05:b0:51:e1:05:3c:04:a6:
29:e9:12:ac:c3:86:18:96:cb:4e:e5:e5:24:a8:3a:
7c:69:fa:0c:cb:53:fb:21:57:11:28:41:e7:11:e9:
ef:51:55:4b:2a:ee:26:a7:71:b3:97:53:f6:0d:c1:
a6:18:1a:4a:5f:ce:5f:9b:58:69:99:3e:38:88:4f:
db:e1:de:87:e8:72:5d:86:ae:60:b3:e6:b6:c6:28:
a8:c4:75:9e:00:d4:84:ec:32:dc:c6:6e:8d:1b:29:
60:4e:ce:c6:e4:5c:44:d4:35:a6:48:66:d9:56:03:
e3:28:29:3e:aa:2a:84:9b:bb:8d:7c:ae:35:74:1b:
a5:78:37:ca:a7:ad:4f:4a:7d:10:9d:72:36:bd:da:
33:cd:44:8d:23:b5:ec:4b:11:7a:3e:4d:b7:af:65:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:DF:3C:6B:75:A9:1D:1C:D4:71:06:E0:D9:94:C9:2F:50:7C:FF
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:c7:6b:a5:bb:92:60:74:aa:ea:71:eb:4f:e0:be:1c:4a:
27:c9:77:d7:7c:64:24:8e:80:f0:6d:7c:75:55:e4:a0:a8:ae:
f6:0d:02:89:3a:39:fa:6e:fa:e7:6d:56:18:30:ee:67:cc:9a:
99:34:2e:f7:f2:f1:8d:64:c2:26:32:a7:08:6c:a5:a1:c7:a4:
85:ff:87:ba:fe:17:b4:a6:d2:9b:c9:a3:fa:a6:ba:26:7a:40:
8e:20:08:8f:a7:c2:cf:07:b8:90:c1:ef:eb:a7:58:28:37:a7:
d5:99:3f:98:84:98:9a:13:26:23:2b:cd:51:4c:84:5e:9a:d2:
37:82:c5:95:99:b6:a0:c0:de:11:26:17:ff:e3:80:71:6d:40:
92:9c:7b:cb:a5:31:ac:c2:df:95:9f:39:a7:bf:7c:28:ae:39:
7a:c9:d7:ea:b4:7b:df:58:67:cf:9f:21:13:1f:92:b5:e0:fb:
64:3a:32:b6:ba:26:93:76:22:35:ea:1e:17:a0:bb:d9:1b:7b:
30:13:4d:75:82:ea:e9:6e:81:e3:3c:28:1c:b9:c7:d8:8f:85:
b0:63:9a:ab:bd:36:19:6d:89:81:d8:16:e1:17:da:fc:67:b4:
b0:8c:e3:5d:e6:71:b7:f6:1f:42:f5:b4:82:4a:d4:a0:2f:5a:
eb:5e:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:23 2025 by rpki-client