Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: TTisVAqUKvVEObatBtoK89+hQklT8a7Tyxj7YnHxlqA=
Subject key identifier: A0:16:58:C5:63:15:CF:F5:8E:87:C8:20:C4:EA:58:7B:68:73:7C:3F
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0198D58386FBB7C5EAF2F1500DF91C3277C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 02BE
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: k+1X6QXVPYvmeva8gy4gPXUIGhuoHzoWcIxfU7SiTP8=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:fb:b7:c5:ea:f2:f1:50:0d:f9:1c:32:77:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=a01658c56315cff58e87c820c4ea587b68737c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:17:35:35:6e:1d:dc:9b:0a:f3:fa:12:a6:
fc:f0:11:f9:9f:11:2f:6b:ea:f6:9e:83:d0:51:0e:
53:16:19:80:2f:9e:61:bd:9d:25:29:67:9e:37:d7:
52:83:6c:9c:82:08:72:a1:4e:55:fd:c0:e6:ec:a7:
20:c5:d7:54:06:fb:a9:a8:c2:9c:2e:e1:c1:d9:c5:
85:26:f9:17:06:6c:b8:3b:ce:de:39:f3:0a:a1:99:
45:0d:a9:f2:de:00:a0:86:88:82:ce:3e:13:a3:9d:
07:f0:e2:0b:19:5f:70:0a:30:b1:00:07:f9:91:ef:
df:ec:db:99:1c:63:34:ad:9b:a6:cf:86:ac:f3:5b:
fa:5d:12:a5:7f:6c:64:3e:d6:20:75:5a:18:86:ca:
93:cb:93:00:7b:cf:e8:6f:38:54:d8:63:dc:24:bb:
5e:68:18:b1:1d:eb:e8:7d:f0:37:11:12:a4:ec:d2:
cf:92:60:ab:26:e9:2e:00:30:49:a4:83:aa:5c:ca:
cd:61:01:da:77:d8:7b:b9:a3:87:72:25:e0:60:c8:
5f:19:05:79:9e:70:40:1c:9e:34:66:08:a2:21:c3:
d9:af:4e:eb:ab:d8:e7:d4:a7:9f:9f:a9:57:fa:f2:
15:32:b8:c1:ef:16:34:3e:05:25:60:13:68:7b:a0:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:58:C5:63:15:CF:F5:8E:87:C8:20:C4:EA:58:7B:68:73:7C:3F
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e2:2d:1c:7f:a6:4a:66:57:15:29:f4:01:e4:91:27:dd:0f:
54:ac:17:a9:89:72:1a:71:c6:7e:53:0b:e2:20:85:3e:5e:d8:
ff:82:1f:9e:4d:5c:e4:ba:aa:fb:3d:25:e3:20:02:70:b0:a3:
4f:b4:71:fc:c1:f2:6f:62:6f:bd:7b:69:c9:b1:dd:a5:6f:6e:
25:80:bc:b1:b0:c7:ef:c3:89:48:65:49:4b:14:92:74:1d:b6:
aa:aa:b5:2f:a5:1d:a2:78:36:01:e8:28:71:54:cb:69:c9:1b:
2e:3d:01:20:f6:20:a8:09:87:97:cc:59:89:be:ac:65:0c:48:
c8:49:f6:0f:84:db:71:ba:7d:64:da:88:90:96:09:9e:26:a7:
1a:8b:dc:58:dc:a8:26:4b:86:b4:cc:9e:c5:ab:a3:78:b3:2f:
9a:04:f3:a6:97:1b:5e:26:5f:9d:55:fe:a8:98:ed:89:78:2b:
25:17:0a:17:16:e1:f4:9d:c4:82:0f:db:ba:e1:28:0a:f4:95:
ba:97:67:a5:fc:10:e2:e4:88:76:2b:d0:5e:ba:ed:d7:3e:8a:
c0:2f:13:77:ef:9d:17:99:6b:a9:88:4e:cc:b1:60:e4:79:c9:
c2:7d:dc:b2:0c:96:f8:e5:7e:ef:fa:14:56:de:05:21:f4:d1:
19:e2:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:47 2025 by rpki-client