Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: Ryc7xO7w+KMwpB67lHwrE1BM7x9Bp6P0t7ND224lC+A=
Subject key identifier: 05:EB:F6:FB:49:80:3C:4C:DD:7F:AC:8C:F1:66:1E:7C:31:C9:4D:E2
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 0198D6604D0D2231B9811ADFD91CE4758D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0EB5
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: pJqFUG/X9RJW0qpK2t3GwtgUM8PRIQR1x+6e7GbvkkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:0d:22:31:b9:81:1a:df:d9:1c:e4:75:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=05ebf6fb49803c4cdd7fac8cf1661e7c31c94de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:ac:6b:2c:2a:28:92:45:ca:e6:29:44:94:
7d:a2:2a:d3:ac:d8:86:d7:b1:e3:bf:c8:b9:0d:c1:
5c:5d:f5:30:58:27:b3:b2:b0:4c:e8:b3:6d:cb:12:
b4:cf:9a:1e:df:d2:88:79:65:9f:28:42:a8:c8:55:
3a:26:21:c2:51:d4:c2:3d:36:63:f9:bc:4a:c2:a9:
28:30:83:79:50:50:f8:96:5f:6e:45:ee:e2:27:5b:
16:e4:68:c2:95:ca:0f:de:8c:18:1c:09:c9:ef:e3:
92:7c:7f:52:5d:e2:13:45:a1:e0:01:57:21:9d:b6:
57:69:b7:b1:21:50:16:33:85:68:17:4e:8a:65:2c:
c5:95:2a:6c:ad:48:f8:35:ff:09:9d:25:8b:d9:7d:
30:99:c5:8d:f9:17:b7:a4:57:c9:28:8a:fd:95:d9:
2f:a2:3d:ed:1d:5b:1d:97:b7:4e:3e:39:a0:9a:10:
a5:fa:ba:3d:70:12:a5:e1:d1:67:6c:44:a4:9a:5d:
21:28:86:f2:cf:42:62:b3:9f:b9:97:f2:5f:7e:79:
6e:ab:05:e3:5e:4b:8e:f8:31:ef:f5:85:b5:17:83:
69:ce:73:2b:25:90:67:f4:04:3f:f4:0a:fb:37:9a:
67:d1:fc:19:08:b3:79:e3:75:f1:34:ba:7b:d1:59:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:F6:FB:49:80:3C:4C:DD:7F:AC:8C:F1:66:1E:7C:31:C9:4D:E2
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:18:fa:47:b6:de:78:92:07:df:94:4c:59:52:47:c9:ba:
11:aa:fc:a7:09:ee:be:39:47:ca:bb:05:01:21:c8:53:f4:2e:
ee:f7:34:d8:01:cc:be:69:30:0a:51:21:bb:79:ea:6e:31:11:
55:ef:82:d1:07:7e:5d:d1:13:45:73:1a:5a:69:f5:66:61:c9:
56:36:54:91:a9:a5:5e:ce:f0:ee:e3:32:5f:7e:17:c5:56:ed:
93:55:04:0f:d7:33:71:f6:eb:3f:98:00:4f:d6:8b:84:3d:b7:
e3:02:e4:2b:ba:b3:66:c0:6a:e3:dc:02:13:7d:15:6c:b2:0b:
58:a2:2b:5c:b7:8d:51:e1:89:c5:c2:4f:8e:37:28:24:2d:9e:
eb:f7:0d:7d:d5:8b:4c:13:20:6d:44:c5:24:5c:e7:2a:c0:97:
ad:f0:33:0b:91:ee:5b:0c:27:7c:2e:cf:0a:70:01:26:c2:85:
2d:e3:cb:fa:c8:94:34:cf:18:9d:13:79:5d:8e:ce:b1:f7:98:
c6:a1:f3:e9:b8:33:5e:d0:b2:d5:0b:1a:46:11:da:70:34:54:
b6:06:e8:02:60:ed:ac:af:38:75:80:db:44:ce:50:be:a5:5a:
36:69:4b:e3:be:df:dc:2a:e3:ae:7e:b1:0d:24:8a:7b:58:ef:
d0:39:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:19 2025 by rpki-client