Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: ewl6qYG3h50tp290eXL5tuDoT3Vjdm1+8vjTp8UmI3w=
Subject key identifier: 98:CA:68:D6:11:C9:CA:32:E6:E8:7C:2C:A9:CA:FA:E4:50:EF:BD:62
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 0198D773D09A788B537943E91B668C539701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 071F
Signing time: Sat 23 Aug 2025 15:02:28 +0000
Manifest this update: Sat 23 Aug 2025 15:02:28 +0000
Manifest next update: Sun 24 Aug 2025 15:02:28 +0000
Files and hashes: 1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: +j4ahJJcyxZesdFVZSh1ShKDKqQYKULE4QGBKJk24Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d0:9a:78:8b:53:79:43:e9:1b:66:8c:53:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Aug 23 15:02:28 2025 GMT
Not After : Aug 24 15:02:28 2025 GMT
Subject: CN=98ca68d611c9ca32e6e87c2ca9cafae450efbd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:44:2b:0b:a3:d4:8f:7d:9a:c8:14:84:17:
b1:cd:5e:9e:0d:4d:b8:ca:be:99:91:0e:7e:06:e1:
89:d0:7d:cf:e8:30:61:ba:1b:d3:ab:2b:a1:5e:d5:
29:11:76:65:2a:bc:b8:9a:9c:c4:e8:a5:84:9f:02:
ae:7e:59:fb:61:10:6d:fc:ec:ef:b5:06:8c:08:6c:
4a:7f:2f:9b:b3:b1:f2:8c:5a:de:3f:96:41:15:28:
60:78:d0:90:74:9e:c9:04:f1:42:5e:31:fe:9a:af:
e0:be:39:27:6a:86:14:f6:74:0e:ee:58:d9:f6:4d:
f9:7b:de:ae:a9:a3:17:65:61:12:cc:c2:2f:7f:77:
19:22:bd:36:9f:e1:8d:aa:17:fa:02:84:9a:db:1e:
fd:49:ba:f7:9b:b6:22:4f:da:2b:54:32:1c:44:c4:
fb:5e:76:b2:5a:57:bb:11:18:c4:0b:19:34:f9:db:
b8:71:69:18:77:04:c2:9c:6d:da:3b:62:d6:af:b1:
ce:67:11:b9:50:91:cb:de:f8:d1:72:7e:a3:34:de:
6f:93:b8:92:dc:dc:80:a4:55:59:a2:78:a7:92:53:
77:68:f2:1a:ad:7d:63:f8:b9:da:5b:02:70:4f:10:
75:fb:a8:36:e3:06:08:1b:06:9c:42:66:bc:c1:39:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:68:D6:11:C9:CA:32:E6:E8:7C:2C:A9:CA:FA:E4:50:EF:BD:62
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:63:a4:a1:f2:33:36:65:cd:8d:f5:ef:55:87:7a:ab:16:
d4:13:49:5f:ad:47:f6:1f:69:e3:09:bc:15:d9:83:e3:0c:bf:
d9:d8:ee:17:6c:66:6a:9f:10:50:1a:e1:57:cc:ea:a9:2c:e7:
16:81:ca:6a:a5:8b:40:4b:34:68:dc:eb:8c:00:75:a5:77:70:
44:3e:94:ea:97:3d:29:96:95:97:ac:bd:56:bf:d7:60:a8:24:
d8:4a:03:d2:c6:fb:71:b7:ad:a4:71:36:3d:d3:19:9d:23:46:
cb:c6:65:38:9c:d1:bd:f5:fb:71:74:30:fe:53:8e:1a:f0:f4:
83:7f:47:87:64:92:fa:a5:1f:e7:1e:58:68:e3:31:cd:9b:0d:
85:75:0d:f7:05:98:4e:ba:9c:06:cf:fe:26:ea:8c:e2:d4:c1:
bc:0f:07:bc:4e:a0:13:8f:0c:02:97:2b:69:f5:b9:63:8b:ed:
fa:63:3d:08:17:83:1c:f8:33:4f:b8:e7:b6:3b:08:b8:77:90:
f2:e2:34:e2:53:4b:b5:4f:ec:e3:49:fe:05:4a:c4:4b:46:e3:
e2:31:48:55:8a:44:30:d4:55:19:8b:a6:39:d5:c1:60:31:d7:
e5:08:7c:ae:2d:79:cd:5b:1d:00:c3:9c:fa:22:25:61:29:62:
22:30:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:10 2025 by rpki-client