Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: dDdpmU24xhzAGe/yR4AGIPSy+y2DB4226gw9ZGYPvvU=
Subject key identifier: A7:E8:4B:A0:BD:80:08:55:16:C0:8C:3F:35:94:C8:CD:65:BE:15:46
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 0198D5160F526BC1D59D38E76EE5040FAC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0816
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: mS5zxZ75Vkjx17eibWw5FfR55F6QwRWq4zizLU+XjC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:52:6b:c1:d5:9d:38:e7:6e:e5:04:0f:ac:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=a7e84ba0bd80085516c08c3f3594c8cd65be1546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:8e:a9:39:94:41:7c:15:a6:10:15:f5:aa:
d3:0d:69:ab:3d:38:05:8f:66:2b:ac:aa:06:b2:0f:
96:17:1b:e0:0e:71:9b:7b:83:2e:56:29:8f:e8:30:
17:1d:65:d2:7e:01:89:91:5e:91:48:36:68:ce:88:
6c:71:c2:35:c1:33:a2:b6:a3:1e:cb:ba:38:37:53:
6b:01:88:b6:75:50:8a:f3:cc:28:bb:49:02:0e:b1:
19:03:fb:24:f9:f7:36:2c:6f:45:13:d8:3c:64:34:
c0:f0:60:ba:1f:ed:07:c1:39:f3:70:21:c4:12:52:
0a:ce:de:f3:38:38:d4:dd:ac:d3:53:5e:ad:e3:d1:
8f:97:ca:36:26:06:a9:3b:fa:19:80:0a:11:35:28:
57:cb:93:40:28:d6:61:d0:41:85:de:ba:b1:55:a0:
c6:75:06:0d:65:33:e4:47:88:3c:de:5d:9b:12:c3:
8b:ff:36:41:cf:18:5a:60:76:b8:ed:97:eb:48:dc:
bc:dd:69:ab:ca:2a:18:b4:39:c4:5e:6c:d9:f0:85:
d6:0f:e9:44:79:81:11:c9:d0:95:70:c0:3e:45:21:
a1:12:58:4c:ce:c9:58:57:3c:8e:7a:3f:49:78:be:
c4:8e:14:86:15:2a:dd:39:cf:de:b3:8d:42:07:27:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:4B:A0:BD:80:08:55:16:C0:8C:3F:35:94:C8:CD:65:BE:15:46
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:69:b6:fe:64:65:60:84:8c:fd:2e:3e:e9:89:8e:96:4c:0d:
49:4c:12:3b:04:df:58:a2:36:d8:a7:eb:a7:80:41:40:1d:cd:
d0:58:4c:ab:71:fb:9d:b5:2e:90:2c:18:a3:85:49:7d:b0:e5:
58:1f:17:ff:e1:20:ef:18:c6:09:a1:84:79:eb:af:2f:79:c0:
a2:3a:e4:cd:89:d8:49:7d:2e:84:9d:e0:eb:f4:e2:eb:fa:7b:
8a:87:00:0b:7e:3b:89:59:3b:ae:d9:80:94:f3:aa:58:af:dd:
fb:34:fd:f6:90:77:10:c4:5f:de:52:5f:46:91:e3:ba:f7:6d:
ee:bb:b6:18:f0:e0:3b:12:04:06:ee:83:38:93:0b:a3:12:53:
43:0e:14:e3:af:d9:11:1c:be:89:f8:52:ba:e3:10:34:6b:b3:
ff:35:57:e6:7b:5b:0e:ab:d5:a7:86:ba:01:6a:09:1e:a4:24:
db:a8:e4:bc:d5:c6:f4:28:11:40:74:45:b6:a3:24:12:b0:c2:
64:de:de:40:99:8c:dc:65:93:a6:e5:83:5f:5f:06:7e:38:a3:
18:81:e0:37:4b:2a:69:42:9c:07:ae:c1:c8:79:56:cc:7a:52:
32:94:58:d8:aa:e6:9a:e9:c7:65:76:37:54:e2:f7:01:6d:63:
f6:57:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:38 2025 by rpki-client