Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: dkB1bdVJg1n/rATlMNlhgRkma2l+Z+OmKeCTGVEvnck=
Subject key identifier: C0:76:D8:5C:BD:F8:B1:3D:0F:C5:37:32:20:33:CF:99:9B:D5:53:E7
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 0198D54DD1AC7A45ED64D593796F2C3A5B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 04C8
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: sXbVvBZ+D05t0nJCE3wIYZI3XsOtQaAR1ZrOYTtHU2I=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d1:ac:7a:45:ed:64:d5:93:79:6f:2c:3a:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=c076d85cbdf8b13d0fc537322033cf999bd553e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:19:5d:03:4f:c9:5b:3d:43:e6:0b:29:2d:
78:1f:29:f0:9c:6e:27:40:39:c7:c3:1e:fa:b9:e5:
cf:1c:f6:4a:e6:e5:47:bc:fc:a0:e3:d7:76:a7:65:
68:87:cb:ed:5a:78:55:8f:58:9e:a3:6f:3d:f8:e1:
c9:61:b1:ba:b5:71:a7:ec:10:d8:a7:bf:e6:b4:ee:
25:b0:6a:2a:56:de:41:91:b0:4f:03:46:b0:17:43:
c7:eb:84:0c:45:a0:23:56:46:2f:13:f4:03:1b:7d:
a0:77:0f:31:4d:eb:fc:93:dd:4b:6f:27:1e:07:5d:
ff:b6:6f:5b:67:60:af:02:73:0b:2e:24:7f:2e:d0:
c5:cf:2c:63:92:8b:0e:71:46:e9:83:14:ec:9f:50:
7c:fe:dc:62:23:58:16:0d:7a:83:ab:ae:1a:83:b4:
70:c8:f3:ce:ba:49:63:8e:5a:84:38:4f:6b:d2:8d:
26:2c:8b:1a:8b:bb:c3:be:2e:57:bd:0e:49:76:89:
ab:10:42:d7:c6:57:86:e1:17:42:2e:99:c2:42:99:
24:9f:de:b0:69:19:7c:2a:69:48:33:a6:f7:37:b6:
5d:50:44:81:ba:dd:a8:10:df:6b:55:11:f7:b0:ce:
19:c7:c0:3d:8b:ff:3e:63:fa:c5:08:c7:65:9e:df:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:D8:5C:BD:F8:B1:3D:0F:C5:37:32:20:33:CF:99:9B:D5:53:E7
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:cb:a0:95:dd:dd:ec:6a:61:37:c9:71:cc:92:8f:bd:b7:
ed:f5:f0:0a:81:83:60:31:78:aa:84:54:a3:95:56:16:54:5d:
fc:92:a7:e4:f8:0c:a5:b8:0d:0e:a2:c8:ad:3b:bf:cb:c1:42:
9c:d8:85:db:87:f7:b1:08:b3:f5:ae:0d:67:c9:49:d3:2a:e3:
f8:5f:c0:c1:d3:8a:e9:a4:68:3e:70:59:d8:bd:fc:4d:8b:c1:
bb:c4:b3:df:fe:30:e0:7b:1d:fb:36:b1:6b:90:9b:2e:19:44:
78:01:a4:de:56:1d:4f:11:80:62:db:20:a7:3d:94:1f:c1:5f:
32:79:ba:34:43:1b:d6:6f:25:12:c5:12:ca:eb:69:ef:f9:82:
59:b8:bd:7a:8b:12:b6:c6:55:21:e2:48:d5:de:3f:63:3e:59:
ed:49:c4:43:41:67:6a:85:7a:de:e3:7f:7f:68:e4:f0:75:67:
73:bc:01:66:94:7b:4b:53:f3:1c:e6:28:c8:42:d4:ee:5c:ef:
a6:33:db:30:bf:b2:be:65:28:90:78:9b:5e:ff:21:49:3a:9c:
cb:84:c3:b0:eb:96:ed:80:d9:fa:09:91:65:cd:b2:a4:59:0b:
ab:e8:01:47:ec:37:75:30:75:dc:cd:40:ad:7d:6b:5a:d1:7b:
87:90:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:06 2025 by rpki-client