
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: 5PYjGLylpoGkt41RPo29AFCjKfHpWn+liZBRqrYdr1U=
Subject key identifier: 60:2E:09:1D:D7:D8:9C:52:BC:67:E4:7E:23:30:63:C2:CE:E8:C1:79
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0198D7057CC9006BD15A8A3B259491B504AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0B33
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: 0+Nb81gYA/EiYAvbAYYhZggfeYZr2N2Szj2MihZ8pL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7c:c9:00:6b:d1:5a:8a:3b:25:94:91:b5:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=602e091dd7d89c52bc67e47e233063c2cee8c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:a9:7b:cf:44:8f:6e:aa:53:4b:01:7e:2d:
95:50:b6:fc:4b:c9:01:97:29:3e:35:1f:be:73:2c:
66:8a:1d:73:a2:4d:9b:53:a2:b3:8b:c6:a3:ef:10:
84:32:56:3a:cb:78:7e:0e:fa:35:e0:97:23:71:df:
13:9d:14:25:30:84:59:d9:40:d2:06:47:e9:de:d8:
82:64:ec:d2:76:11:24:48:ef:c7:92:35:b5:ef:3c:
65:22:e4:17:57:d3:5f:ea:20:1b:c6:61:36:1a:10:
1a:a8:e9:71:f5:74:64:9d:19:93:18:db:42:e8:c1:
1b:2c:c3:be:04:cb:05:30:bc:55:51:59:83:76:7a:
dc:6d:f3:8b:67:6e:e6:f7:f1:25:14:84:b4:6b:6f:
26:2c:58:6a:8e:b1:a2:4b:6d:ad:dc:ff:6b:7c:a2:
c8:d4:a7:2f:1b:4c:81:49:5d:cc:4d:82:7c:82:36:
35:89:21:69:50:53:14:a1:cd:60:fd:98:ea:85:98:
02:a1:31:2d:c7:f2:91:8a:bb:6f:7d:96:24:ef:d4:
0a:0d:f4:49:56:62:5c:d6:14:22:27:ce:28:50:2c:
06:d3:b1:12:97:b1:15:37:85:b0:d6:8e:b6:df:b4:
3c:40:74:9a:10:ff:ea:0b:cf:cc:d4:a8:25:d0:78:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:09:1D:D7:D8:9C:52:BC:67:E4:7E:23:30:63:C2:CE:E8:C1:79
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1f:5c:4e:ff:16:0e:d4:2c:0b:2b:9c:25:73:dd:aa:5b:a8:
25:ec:98:b9:5f:d7:ca:7f:0c:f2:c5:8d:b3:fb:b2:78:d2:3a:
f1:82:39:ea:6a:06:ce:cc:fa:24:af:1c:33:20:e0:5b:95:14:
29:da:05:c7:4f:13:62:ba:26:31:4a:be:a2:83:18:47:b8:37:
a2:9b:41:a9:8c:a4:36:c9:e2:fd:f7:ef:b4:d1:4b:5a:e2:aa:
9f:28:3c:51:6f:85:0f:08:bd:35:43:1a:58:d8:f1:57:87:ab:
56:4a:4c:3a:4b:b3:22:01:2c:09:2a:72:fe:d5:ca:15:c9:4a:
df:64:79:c8:bf:25:28:7c:ae:ce:c0:ec:e2:c6:54:36:33:56:
22:b4:80:f1:f0:fc:e4:11:be:5e:63:c2:16:ad:09:11:38:fa:
0b:4e:6b:f3:69:ce:18:1d:bb:3e:31:34:75:b6:cf:f9:e2:a3:
3b:e1:8b:4f:4d:fe:11:37:7b:60:00:d9:ef:a0:b6:82:eb:5a:
4b:8b:d5:d4:84:35:f1:d8:7b:c6:9a:dc:d0:54:62:27:af:77:
ac:d0:ed:bb:30:f3:14:eb:e0:ae:03:b6:44:d1:e5:a9:30:d2:
07:34:91:5b:85:0a:af:06:9f:9d:9f:83:06:30:65:0e:3b:89:
58:64:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:33 2025 by rpki-client