Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: CenvYXkGlRorgczI/Zezmu11wDnixTQvE0eFYivuJqQ=
Subject key identifier: 30:6A:82:EB:E4:FD:45:D0:7D:60:01:5E:97:86:0A:D8:65:CE:B3:59
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0198D583822EB82054914970A439CEC0B7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 12AB
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: iyK02smpTtWUBX5dVcWN79yjqbfMNGyHs4KX/psN4+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:82:2e:b8:20:54:91:49:70:a4:39:ce:c0:b7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=306a82ebe4fd45d07d60015e97860ad865ceb359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:8b:eb:e1:4b:31:a3:9e:41:f4:7b:a5:be:
c5:8f:a1:2c:11:69:71:25:b7:72:ed:66:e3:a2:31:
4f:03:af:98:a8:70:d1:89:6a:3c:de:38:c9:87:29:
49:45:f4:03:15:55:9b:26:71:e6:c7:52:d6:2e:d8:
7f:a5:90:27:a2:62:aa:86:51:01:c3:26:0e:ab:1d:
ef:6e:f2:a0:05:3b:02:f5:82:60:f5:c6:7b:b3:a2:
e7:5c:33:db:24:9e:2d:0c:23:ff:22:2e:cd:70:07:
d6:d3:2f:60:e1:91:40:3b:f6:51:02:8c:7b:50:cc:
df:4b:36:a4:47:33:ca:05:93:d3:14:f3:2c:46:87:
a6:c0:a4:d8:bc:87:8f:b9:d5:52:e4:c1:ad:a6:d8:
51:53:71:7f:a2:09:64:19:1e:21:32:56:fa:c1:68:
1e:eb:7e:ee:05:18:59:c6:c0:e8:2a:37:dd:ba:3e:
e3:4e:6b:d4:99:76:d2:f7:5f:33:22:ac:6d:a3:2b:
2a:85:01:c7:fa:92:a9:8d:7f:b0:4b:b2:a2:21:3c:
4e:48:94:d3:52:a6:e7:55:b0:d1:49:1e:02:8e:86:
b1:3f:c9:fe:b1:60:b9:06:09:0d:40:73:93:e0:33:
32:32:17:8b:40:8a:dc:e7:a4:5c:35:14:c6:48:56:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:82:EB:E4:FD:45:D0:7D:60:01:5E:97:86:0A:D8:65:CE:B3:59
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:82:12:5f:31:78:9e:4d:0d:14:85:cb:f3:f1:ac:a9:48:
ca:cd:ae:01:8e:20:69:0b:14:cf:ec:b4:73:39:08:21:cb:40:
b8:62:0e:84:a7:21:a0:76:ce:0a:6f:1f:aa:64:23:2c:40:11:
c5:67:e8:63:83:ba:45:6a:53:3f:32:d7:c6:a6:c2:5c:49:4b:
4a:03:9e:24:e3:ab:0d:af:fc:72:03:c8:20:52:a9:1f:ec:f8:
0b:26:9c:6e:c9:c0:1d:10:53:3e:c1:4d:e3:be:61:0c:20:56:
f3:89:b0:64:89:d5:d8:f2:50:a9:10:67:7d:ab:a4:b5:77:bb:
51:52:89:a8:e2:d7:f0:b1:71:84:5b:55:a2:9b:64:5c:c7:f9:
72:93:0d:47:53:35:c6:de:57:eb:ee:5b:78:29:27:6a:d3:2f:
f3:0d:a8:1c:8f:2f:a4:57:8d:0f:c1:cb:0e:06:86:f6:24:ef:
7d:84:0e:e3:c8:e0:a8:92:6b:e2:20:cf:7c:6b:85:58:49:92:
56:b9:bb:fa:d6:b5:ff:22:87:7d:ea:f5:5e:3c:4d:23:53:d3:
82:06:e5:2d:eb:44:31:c3:86:e3:ef:0f:cc:4d:02:54:1d:fc:
55:e8:02:cd:bb:12:b0:92:4c:30:c0:d9:21:06:1f:2d:6c:49:
f5:c9:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:14 2025 by rpki-client