Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: D4n4r9QvIXhznfrIjHM5uiXmtYDoeOziSE2+JvQKSV0=
Subject key identifier: E7:5E:F5:DD:C0:81:3D:EC:0C:7A:4A:67:58:AB:92:C5:D3:61:84:02
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 0198D5BB9634A36AF4FDC6588BBA391B802D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 0FC1
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: fZsyBM3G8YeNc3Z6weJZgyR71V4kWyijgelwEmokOL0=)
5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:96:34:a3:6a:f4:fd:c6:58:8b:ba:39:1b:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=e75ef5ddc0813dec0c7a4a6758ab92c5d3618402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:74:1b:d1:fb:04:6d:1a:95:d6:41:b0:2c:
3a:ed:54:47:b0:98:c4:5a:5c:d5:1d:f3:a8:c4:e3:
32:97:d9:3c:09:73:59:f3:ee:1a:54:f6:75:51:56:
0e:89:d1:b7:68:ee:ed:2d:79:b8:50:51:4d:0a:05:
40:ce:5c:d7:2c:67:df:05:06:87:5c:6f:9e:77:e3:
9d:12:0c:b6:4b:61:1e:5a:a9:f9:0b:0e:c5:65:46:
2d:cd:d4:fa:a2:9a:d8:d7:c9:ea:3c:68:98:41:d9:
a5:de:2e:d0:9e:df:2d:ae:e5:bf:10:21:9b:ac:43:
84:46:4a:e7:fe:9d:0b:2f:5f:5a:5e:20:c2:e7:af:
bb:ec:bf:d1:b4:15:61:c9:ed:5a:6d:05:c7:d7:41:
38:ea:29:d8:9c:ab:92:40:90:a5:e0:27:4e:81:d8:
af:02:32:96:4a:9e:df:f6:f6:56:42:7f:f4:ef:cb:
99:1f:ea:04:ea:d4:bc:0a:c3:2b:a0:48:79:2e:c9:
c9:87:15:5d:12:2e:86:28:6b:0b:90:ee:09:b4:8e:
35:cd:80:6c:d0:eb:82:a1:5b:cc:df:e1:49:b1:95:
2c:16:bc:fc:8d:d2:0a:aa:be:00:7e:d4:de:6e:5d:
3a:d8:b7:55:6f:92:26:76:70:45:91:f6:f3:1a:09:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:F5:DD:C0:81:3D:EC:0C:7A:4A:67:58:AB:92:C5:D3:61:84:02
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:70:bc:cd:35:fb:62:29:92:99:5d:99:0b:09:14:c7:b2:b3:
9e:fb:e0:56:14:8a:36:a7:40:6d:10:a3:07:50:f0:65:26:96:
ab:da:0e:90:79:bc:da:33:08:f6:49:c9:1d:84:b4:d2:69:e3:
1e:37:9b:20:2a:3f:46:17:72:2d:61:e6:f1:7a:6b:63:c5:ce:
d2:79:7e:64:0e:d1:35:6d:4d:c8:f7:30:b9:41:46:45:f3:64:
cd:af:5e:90:ee:5f:ee:7d:51:2a:fa:17:47:52:46:35:b8:53:
9c:6c:00:49:d1:bd:24:59:32:03:06:d6:b2:b3:b4:23:96:1d:
78:83:dd:e6:15:a3:10:ce:49:6b:a0:6b:db:d1:71:af:fc:ba:
cb:c0:2b:c1:5d:75:91:a4:fc:46:69:63:2e:06:c6:12:5b:f5:
62:06:a9:3b:4a:b7:eb:f9:2f:0d:cc:8e:9f:12:98:93:6f:a8:
8c:58:55:d9:9a:47:3e:f6:27:3c:05:02:07:d0:f3:53:e0:16:
ab:44:77:c9:bc:8f:d8:d5:87:40:5e:90:70:e3:9f:ee:7a:0e:
ae:8f:c4:87:6d:3c:04:20:ea:30:68:d4:7d:9b:de:30:bf:f6:
0c:80:a5:4c:78:f7:8c:61:76:9f:af:2d:a4:d1:11:ab:56:71:
27:c0:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client