Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json)
Hash identifier: 5HV2A71Me8WEWm02FR32awNdsCxebhZl6EkGIP5nG5w=
Subject key identifier: 75:75:97:E1:B5:6F:9A:F6:F6:75:7C:52:17:FF:E0:AE:BA:1A:F5:84
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 0198D583BA618E1726982EFE26E679F1E914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=)
2: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=)
3: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=)
4: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: qR62fbKWyeU56YsgV7Qjj9F9AH/Ewdqc32h7OcmvWJk=)
5: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=)
6: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=)
7: eGwOE8lbraIFP9l-UBBCUyjN8_w.roa (hash: E3bGB9caMn035nPuIHCWLooaKqDnHxrQ+ZG/yfDBfXc=)
8: obqfL4R2IKMApxxeeUPFE0sW9OQ.roa (hash: 7Ovq+/kB1PpmG+7SGcAWS7Jl70fuixev1vRb1jw0DXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ba:61:8e:17:26:98:2e:fe:26:e6:79:f1:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=757597e1b56f9af6f6757c5217ffe0aeba1af584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:51:da:73:a3:0b:3c:d0:f3:d3:08:a0:e3:
15:f5:9d:39:20:b2:1e:d7:aa:b2:c8:ae:a8:68:3b:
f7:87:14:8e:14:9a:e8:60:48:ce:9a:b4:ea:80:21:
d3:7b:c8:7b:ca:5a:a6:1a:c2:63:98:85:74:4c:24:
0f:bd:b7:c7:ed:68:eb:a7:95:84:29:35:5b:df:6e:
10:3d:b6:4c:c6:da:34:62:2c:6e:5f:d2:5f:e0:2f:
1e:ef:40:75:69:42:0e:28:0d:fa:b9:e3:ee:83:dd:
ee:00:b2:2d:5f:d7:91:7d:fa:35:b3:51:f9:27:f7:
5a:8f:09:84:f6:2b:83:c8:05:8c:ea:a9:7d:39:d2:
39:f1:f1:83:0f:99:64:85:4e:91:8e:3c:10:dd:bf:
b6:6f:ba:cf:8e:59:22:47:89:40:c8:52:3d:fc:2f:
67:95:29:0a:55:e9:97:42:c0:91:f3:0a:ec:99:6d:
9a:2b:05:05:f4:bb:4e:40:84:d4:a0:3a:eb:c1:60:
05:de:2c:5a:14:cd:ec:c7:1d:6a:3b:f7:66:d5:62:
04:c7:ff:8a:75:a5:ba:73:49:e6:b5:45:53:6b:4f:
29:0a:6b:16:00:7e:fc:28:ca:6a:bb:41:a3:c1:1b:
78:ce:ae:d2:0b:77:be:e5:64:bf:03:14:ff:45:37:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:97:E1:B5:6F:9A:F6:F6:75:7C:52:17:FF:E0:AE:BA:1A:F5:84
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:2a:24:1f:d8:94:e3:59:3e:21:55:82:12:e8:41:87:52:
42:bc:d3:05:b0:b6:74:59:e3:67:56:8d:8a:fa:fc:af:71:4f:
9d:e7:69:77:0d:1e:b1:d6:b1:90:e7:cc:8e:4a:6e:03:0c:0c:
2d:c4:be:b0:c0:c2:a4:a2:20:b8:22:f7:1a:88:07:57:b0:10:
69:c1:73:b4:35:e3:96:34:b6:9b:db:93:ae:1d:d1:af:29:52:
ce:78:dc:af:7f:77:36:43:47:6d:e1:a6:bf:f3:98:90:ae:90:
a5:4a:b3:81:e8:4b:f8:69:3e:f3:d2:0b:1d:c4:a1:52:a0:f2:
cd:5d:f4:8e:e5:7e:3d:0d:f1:e0:69:9f:59:10:3c:48:b8:45:
d5:1e:b5:e9:a8:6b:ba:50:70:84:ae:c2:c1:7d:89:ca:0e:82:
05:69:6e:db:eb:cc:b4:40:7b:29:6a:24:7d:7e:c7:83:13:23:
67:5f:56:7b:da:15:c8:17:8f:be:e6:6e:51:51:91:6c:2e:73:
35:0c:77:5b:d6:dc:87:8d:15:89:50:4f:aa:f5:84:49:b8:d9:
37:d6:c1:db:d6:a6:51:ea:d9:c3:b9:b6:bf:eb:0e:64:28:a6:
f5:2f:0f:f9:ba:66:e3:10:ab:09:4c:43:61:2f:c6:9d:fa:fa:
8d:09:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:35 2025 by rpki-client