Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: nQlDy1vbTnppZxvIB0BXOy6YL3cJrDTI4gmxWHjilOs=
Subject key identifier: 08:CE:C9:AC:BE:40:F9:92:84:27:2E:DA:86:43:7C:14:E8:8C:D4:5A
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 0198D6612C4239D2A9FC51980ED459EA5FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0F07
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: QLymquPEiIii2Dx0S5aRuGsKyleNxkc05kWqsL3Ma2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2c:42:39:d2:a9:fc:51:98:0e:d4:59:ea:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=08cec9acbe40f99284272eda86437c14e88cd45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:66:8c:68:40:8e:bc:67:4c:81:c0:57:2b:
56:ef:0a:ab:16:d7:31:80:72:dd:1b:df:ad:6b:a5:
fd:63:86:a6:40:1f:b9:e7:ba:f3:83:43:8d:d7:7c:
9e:05:c4:a9:5c:71:4a:b3:61:55:6d:db:61:01:10:
2f:e6:97:6e:5e:7f:c2:2b:ad:41:aa:6a:2f:63:61:
18:dd:5c:82:b1:96:de:c5:21:f3:fe:d2:40:34:1f:
bc:da:c7:62:7e:f9:91:51:f9:af:4b:36:85:3d:59:
69:70:c9:7c:62:66:28:11:9f:55:76:d6:56:f4:20:
b7:ad:09:88:99:7c:56:3d:72:18:c4:41:cd:ed:ed:
b3:ee:4c:28:84:6d:a0:fe:d6:1e:56:1c:50:d4:9e:
8c:b8:0f:1b:3e:19:1b:5e:17:68:02:8b:fb:d1:b2:
68:9f:5c:74:ee:3f:21:d9:57:01:e0:6f:52:91:2b:
41:71:87:77:af:ee:26:eb:a5:2b:9f:f9:15:41:51:
d5:9e:6e:de:f1:01:eb:10:e0:4e:21:27:56:60:85:
41:7c:19:0e:21:81:c6:c8:91:f4:98:ea:7d:9c:bf:
58:67:ea:c5:6a:29:d7:a9:5f:b5:74:7c:9e:f3:7b:
9b:02:06:b7:b2:2e:6e:44:7c:1e:4e:8e:4f:c5:9e:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:C9:AC:BE:40:F9:92:84:27:2E:DA:86:43:7C:14:E8:8C:D4:5A
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:8f:21:b2:f7:54:6d:67:0b:a3:3f:32:71:24:18:0e:be:
db:e6:f2:49:25:e8:cf:9f:a8:de:a5:78:0a:87:53:c4:55:84:
ac:7c:72:ec:82:63:e0:c2:ee:7a:74:74:09:42:f1:a5:b8:a2:
97:6b:9a:68:5a:7c:14:3a:d9:67:27:29:d4:a7:62:d6:9d:3f:
7a:d6:03:7d:bc:b2:41:54:5f:5a:19:70:50:6f:bd:67:04:76:
10:54:f3:3a:e6:bb:7d:e9:90:ca:00:e5:00:9a:e8:cf:34:0d:
ed:91:11:1f:53:01:b4:b7:0a:30:0c:de:16:fd:69:b2:15:de:
4f:b5:3c:6b:ce:9f:20:59:a8:f8:db:46:8e:a7:92:f1:a7:fd:
07:a3:f2:89:22:14:b5:a3:db:02:55:2f:cb:24:96:5d:fa:8f:
8a:df:4a:53:79:c6:67:3c:20:88:e0:c4:18:6e:e3:c1:1f:32:
2a:f9:60:ee:8e:4b:10:6c:43:1a:d6:1a:5a:e7:38:b1:8a:42:
bc:d5:ac:2e:b1:30:bd:72:36:09:00:4a:8c:40:1e:9e:ba:9e:
0b:31:c0:5d:ef:e8:c7:89:1b:1d:e1:4d:4a:1b:96:9d:b1:92:
23:d4:a5:c4:fb:f0:10:c4:38:fa:e5:d3:e2:48:4a:f3:10:4a:
0a:0a:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:07 2025 by rpki-client