Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: /LU08qo6+EUXiQaDG+LC9knmScvd/opGt8D1dgPW1V0=
Subject key identifier: 70:9C:29:A8:FA:F3:00:E1:AE:8B:A8:F9:4D:43:24:7A:76:BF:18:70
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 0198D5F1B791E4EF844B732F8B2EDCFBC9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 13F5
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: qjCcHi6yOEGBwwGW0htSGMh5zdRIrpRfVsrNgvFEf6M=)
2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b7:91:e4:ef:84:4b:73:2f:8b:2e:dc:fb:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=709c29a8faf300e1ae8ba8f94d43247a76bf1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:40:b5:e9:60:9b:e7:fd:65:bf:10:de:b1:
36:e4:f7:2e:75:02:d9:0d:8e:07:2b:4e:ab:16:1a:
89:54:5e:b9:e6:34:47:9e:fd:41:ef:85:c9:e1:f6:
5b:c7:f7:66:71:f0:f9:94:a4:d2:10:7b:82:07:e1:
29:fd:a3:72:08:07:0d:35:19:dc:18:bd:4b:a6:98:
ea:44:70:92:02:36:6e:66:90:5c:5a:2d:63:0e:82:
2c:ff:a0:9a:8a:fd:be:4e:3c:6c:0b:dc:0d:ac:fd:
0b:4b:6e:15:1c:c8:eb:f4:e7:1e:74:db:05:89:71:
54:71:c0:e3:23:bd:a9:97:38:a2:52:34:b1:42:55:
cc:ba:49:6c:96:60:82:53:a0:88:0a:31:f5:0a:ed:
c8:96:4b:b2:e6:14:36:b8:3a:5b:de:22:70:fc:b5:
fd:28:97:96:02:6b:1a:d9:b8:20:99:d7:b6:e3:8c:
b8:c5:3e:0f:e8:f7:53:b7:22:e8:53:66:61:4b:79:
08:0a:ce:6b:fe:d5:01:95:82:c2:e3:9f:8c:9b:8e:
6c:26:44:6d:dd:83:4c:65:dc:49:fa:3b:74:8f:ff:
83:d9:2d:1d:1a:1e:70:48:32:10:38:f8:90:87:b0:
81:47:c2:8a:1a:03:92:2c:c2:c6:e5:7d:49:43:1f:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:29:A8:FA:F3:00:E1:AE:8B:A8:F9:4D:43:24:7A:76:BF:18:70
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5e:0b:6f:ae:86:9f:48:0a:87:fe:29:c8:24:19:d2:68:b0:
8d:2c:a7:af:75:3a:5c:3b:ff:f0:05:10:70:dd:66:6e:aa:f0:
85:89:e6:03:73:1e:06:d9:65:03:d8:ad:87:3b:21:78:e2:31:
b5:e7:c3:09:59:e4:2c:d1:63:f1:ed:4f:ac:5c:7c:83:2c:cc:
c3:2f:57:65:a7:1d:af:fd:a3:88:43:3a:17:43:d7:4c:cd:04:
e7:89:f4:fe:0b:57:67:4e:60:9a:89:d3:6b:8f:3b:a2:97:e9:
f0:9a:c9:52:4e:68:3b:0d:34:2b:25:c4:47:a6:6b:26:5f:79:
f3:5a:ec:39:37:3b:99:72:a0:73:f8:a5:69:72:56:f0:b7:2e:
63:7a:b5:d6:c0:8a:a3:3a:59:99:2b:0a:4b:e5:4c:f8:a0:e9:
ad:7f:ee:63:4a:78:8c:03:ac:70:16:fb:cd:58:3d:7e:ea:c4:
fd:7e:00:42:da:19:32:24:2c:9d:4e:52:4d:ce:95:cb:75:ce:
43:c0:0d:35:b0:15:46:91:2c:ee:51:d9:52:14:35:5c:52:c2:
9b:7b:de:ed:07:57:8e:a9:b3:68:67:4a:97:d3:8c:6c:a2:1e:
5f:5c:7c:27:32:a6:58:06:85:37:fb:53:1d:d3:83:a7:d1:a0:
00:d9:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:17 2025 by rpki-client