Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: zilYsWj/RUodVpFk8BKC03/RWKqO1TgkwV2jggQovqQ=
Subject key identifier: 10:8A:F9:8D:F2:C3:3E:B6:C8:A7:6C:C1:F6:10:6F:19:F7:AF:86:A8
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0198D773C57181AF6152D7F74CABE4358874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0266
Signing time: Sat 23 Aug 2025 15:02:25 +0000
Manifest this update: Sat 23 Aug 2025 15:02:25 +0000
Manifest next update: Sun 24 Aug 2025 15:02:25 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: qfkl4ugDwVER8WWCfmspxbN_99Q.roa (hash: Hk6Dp+LsA1AjgFfnUQPOphNg3N7O/mK1D22CLXcTXWU=)
3: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: Is0iWooq0ZD52hZcMRTKrLiMjelXkuzInnSdKlELrM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c5:71:81:af:61:52:d7:f7:4c:ab:e4:35:88:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Aug 23 15:02:25 2025 GMT
Not After : Aug 24 15:02:25 2025 GMT
Subject: CN=108af98df2c33eb6c8a76cc1f6106f19f7af86a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:ab:9c:80:3f:ee:1c:00:b4:f2:43:ae:31:
b5:2d:b0:db:dd:d3:4a:69:89:70:2e:31:60:91:fc:
d2:62:f7:2b:51:29:8e:b6:82:20:46:fa:48:4e:a1:
da:3f:f3:18:34:19:68:95:cd:8b:9c:fa:07:ba:8f:
36:95:c4:6f:30:1e:a0:af:a1:49:c3:59:67:de:48:
df:c8:d1:7e:f9:78:cf:d2:38:37:44:5b:13:63:9e:
6f:67:ba:9c:31:56:cc:2c:5c:12:ce:c2:ee:e9:31:
77:9b:fc:c2:6f:92:1a:60:e1:37:9f:91:b5:63:b5:
97:95:f9:9d:8f:af:46:86:95:02:97:81:6c:18:d8:
7c:ae:76:bf:01:a5:9d:4a:c8:72:1a:e3:f8:d1:f4:
9c:3e:20:c4:82:41:2b:48:38:b9:fb:fd:b2:6e:75:
77:d8:bd:da:d7:d8:20:bb:b6:28:3a:a7:cd:41:90:
74:1f:c8:81:2f:c0:71:1e:1e:83:7c:af:bc:b0:c5:
18:e8:75:40:2d:d7:0c:54:4b:70:c4:1b:ce:16:21:
a9:7b:c2:55:c4:77:48:50:74:21:5a:71:e5:af:25:
3a:18:23:27:e6:0d:e6:b6:40:2a:93:36:7c:c8:f9:
01:6e:25:6e:6f:d9:61:f1:e3:7e:34:08:57:31:7f:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:F9:8D:F2:C3:3E:B6:C8:A7:6C:C1:F6:10:6F:19:F7:AF:86:A8
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:61:f4:b3:03:3d:f6:49:9c:40:a4:11:0a:d6:c2:ca:8d:
ef:f6:19:34:c4:a0:17:4b:b6:b3:af:fe:f7:53:a9:55:80:eb:
00:9f:9b:e7:7d:63:86:bb:c1:1c:46:a8:08:bc:fe:64:a3:0f:
11:15:42:d5:04:c3:ba:48:fb:a1:db:76:fb:db:a4:c3:c4:c0:
3b:93:a8:7d:d1:f3:a0:de:0e:e6:1a:14:cb:61:e6:17:64:73:
e4:22:ee:75:4c:58:72:5d:b9:ba:80:f1:4d:f5:dd:9e:be:3f:
81:d9:6e:f2:5f:dc:1d:d5:0a:45:03:42:ab:d0:29:40:35:2e:
8d:69:cf:b7:b1:b1:38:de:79:38:3a:ae:d4:01:bf:05:24:76:
18:0c:af:d4:1b:03:5f:83:1b:b9:a4:fc:dd:ad:20:3a:3b:89:
b8:e8:0c:46:22:99:f6:6a:ff:95:ef:d3:3c:24:67:f3:a4:c2:
0b:57:f9:67:5d:aa:d2:80:20:de:d8:62:ad:06:df:40:12:9e:
21:dc:3e:cc:c0:41:63:cf:32:44:e1:a9:44:c4:9e:ab:c8:51:
44:18:eb:11:17:84:15:05:58:4b:f2:49:08:d4:96:3d:0e:84:
38:08:27:de:9b:7a:97:c2:15:c0:ce:a3:d2:e0:03:e2:e7:e0:
de:7e:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:47 2025 by rpki-client