Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: tgeRs/tIzD3m6JlSYqOm5Di+ZAtH99FEbJkybKRIdhE=
Subject key identifier: 80:C4:EB:02:CD:22:D8:87:E3:23:D1:0C:57:B3:8B:BA:F1:B1:0B:F8
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 0198D4736436BA0EB1D430C82159D713B01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0F67
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: 2iARrMQLyL4XJ08x3SNjVbs/dJRlSv4fen9sokXpfTc=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:64:36:ba:0e:b1:d4:30:c8:21:59:d7:13:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=80c4eb02cd22d887e323d10c57b38bbaf1b10bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:49:27:ca:0c:9e:53:1f:27:52:77:75:49:
66:6f:26:3e:e6:93:99:62:9b:30:d2:fa:ba:37:57:
71:19:cb:41:ee:ac:64:54:78:1d:14:2b:be:65:04:
ca:9f:ac:dd:62:9e:5e:a5:8b:77:35:e8:8a:6a:99:
88:14:6e:f4:97:e4:8b:43:f0:40:dc:3d:ba:74:eb:
6f:3c:d4:de:95:90:1c:e1:d4:04:08:fd:c4:99:0d:
64:a0:c4:f7:e1:f9:17:1f:6f:c7:23:43:d7:66:eb:
c5:79:b7:43:f9:9f:f7:f5:c9:09:68:6d:3a:0f:ea:
57:ba:be:f4:67:33:fa:7b:30:bb:d8:1b:c7:69:c8:
4b:9b:20:fd:81:ee:2a:fa:7a:b5:7f:be:fe:aa:de:
2a:c6:81:48:30:cd:d7:38:09:fe:d6:77:4d:cb:15:
12:c7:a5:e7:f7:27:c9:92:b5:08:1c:56:66:5d:ce:
47:72:7e:8d:33:40:e5:16:6e:30:1e:3c:81:ac:22:
2e:19:fb:d6:66:2b:dd:bf:9c:0b:5c:c0:c6:9e:ee:
e8:f5:11:50:17:98:3e:f2:c0:ef:06:f3:e9:76:e6:
ff:83:65:40:a3:e3:c5:0e:18:87:03:d5:64:43:4f:
29:de:fd:a0:ec:44:14:b5:08:fd:04:36:11:9f:ba:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:EB:02:CD:22:D8:87:E3:23:D1:0C:57:B3:8B:BA:F1:B1:0B:F8
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:57:84:4e:e5:d3:19:1f:25:6c:a3:26:ea:fc:4b:b0:70:fa:
7d:bb:73:6d:19:76:9a:bf:0a:ae:39:62:77:7d:f6:ea:21:5c:
78:44:8b:a1:7d:fe:db:46:dc:cf:01:b7:af:90:af:f9:89:90:
8a:19:6b:b0:31:8e:3c:cb:8b:2d:53:38:3a:a7:8c:47:27:f8:
94:c3:c4:1a:cb:ac:ac:51:b1:42:b1:45:56:f7:68:f6:87:74:
32:b3:77:ff:08:61:a3:34:e3:c5:e4:8e:82:57:4a:4f:8e:01:
91:4d:1d:8c:13:69:8b:30:b1:af:e9:96:8b:fd:0c:e4:90:80:
c2:bc:f6:21:40:72:bb:a9:36:0d:db:9a:25:f3:64:91:76:8b:
ad:11:ce:8e:02:ec:0a:67:7c:a5:4d:11:b6:22:92:83:2a:42:
67:e3:2b:f9:1d:b2:1f:18:0a:27:f5:4b:d9:29:0e:e0:cf:3f:
19:dc:01:4a:52:1b:35:14:84:e7:c1:ab:02:4c:ab:d5:e9:cc:
ce:c6:7b:7c:cb:da:e1:fe:2f:90:f1:8d:f9:6b:24:af:5b:29:
2b:9f:ff:e9:97:27:ae:e2:bb:85:fc:f1:55:65:19:f8:39:b4:
d3:50:fb:e1:e5:34:96:49:11:db:c2:70:fe:69:e9:cb:29:73:
e6:bb:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:47 2025 by rpki-client