Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: LyFmHiY2F/1vTDKCimsHRK/ZUFQ0nUu/ICdiGUxS29c=
Subject key identifier: 5A:B5:BC:C0:C1:A0:10:0C:6B:D3:9E:1A:92:22:90:74:66:19:09:E6
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 0198D4E00A99C4EAC44D766B66207494E9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: 2o1hSm/ENhEcaiPsFa/gdPESZxnQ1WKd2gI+oi14GNw=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0a:99:c4:ea:c4:4d:76:6b:66:20:74:94:e9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=5ab5bcc0c1a0100c6bd39e1a92229074661909e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:77:8f:c6:bc:82:ef:a0:41:eb:9f:ce:d8:
c0:3d:6b:da:a4:60:38:3c:8d:e5:29:93:4f:84:ab:
90:f5:eb:72:f1:04:ac:8f:cf:7e:1d:dd:27:ed:79:
d7:4e:6a:c8:35:93:47:b8:5b:90:da:02:e3:2b:c4:
04:a8:1b:8e:a7:6d:6a:4b:0b:2d:45:e9:16:19:c4:
c4:c5:cd:b0:bc:cb:5c:28:12:dc:cf:4d:a0:41:d6:
5b:ce:07:bc:f1:e2:68:25:56:5d:e6:39:97:57:b1:
fc:de:c2:96:50:56:15:15:6f:41:c0:0f:0a:bd:f7:
4d:bc:43:b2:a1:7b:cb:43:56:3e:d3:1a:0d:b8:21:
5f:6b:60:6a:72:db:0c:04:bf:2b:6f:45:92:0c:20:
1f:79:64:c6:27:ff:03:75:e7:50:16:c7:a9:6f:4a:
1f:ca:fc:ba:2e:5a:71:3d:cb:45:65:81:32:51:b9:
59:b7:e7:4e:06:f7:a9:f4:76:c8:86:fd:1f:e4:4f:
b6:39:46:b8:1e:6d:db:01:6f:c0:93:3b:9c:01:2c:
c2:a8:81:da:47:d4:bf:46:e5:21:41:50:89:2b:98:
ec:cc:25:c4:85:68:25:99:aa:22:84:63:31:cb:42:
0a:ae:e0:7f:3f:66:8b:57:b7:5d:80:f5:0b:9b:7d:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:BC:C0:C1:A0:10:0C:6B:D3:9E:1A:92:22:90:74:66:19:09:E6
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:7f:d9:07:fe:4a:05:6f:1b:d8:99:ec:f2:73:06:7d:f4:
e0:90:98:70:7d:93:60:52:84:e7:c1:f2:5e:c3:f0:3b:c6:f5:
d2:a7:ad:67:74:c4:50:03:98:1c:bb:24:8f:f5:51:82:59:00:
06:fa:36:73:c2:5f:a1:5d:da:24:d0:5a:e5:e6:c7:49:e7:6c:
e0:62:08:40:d3:e6:c7:39:72:83:d9:51:6d:68:18:01:35:4b:
b3:84:fb:1e:ca:8e:70:2b:b7:8c:6e:85:fd:14:74:08:04:00:
6e:1d:f2:47:fe:24:7c:f6:89:c0:a2:49:f0:f9:64:6a:8c:25:
fa:b7:2c:fd:f7:ab:39:5f:56:e5:97:92:18:48:36:da:de:56:
8e:92:ae:de:20:ec:4a:01:d2:d6:02:26:a5:a0:ff:98:b6:51:
8d:22:30:7c:89:83:fd:81:8e:77:3e:a4:f7:d9:27:b5:b1:88:
04:2e:84:a6:df:aa:47:63:66:89:e7:cb:9e:ea:a2:43:e3:07:
80:59:9b:7e:42:ea:74:c3:3c:24:91:50:c5:5b:c7:c3:85:d0:
e7:22:57:9d:86:61:a2:73:2f:2e:80:80:83:07:0e:66:46:d9:
d3:b1:4c:11:f3:34:f9:52:2e:86:d6:a2:b0:cc:f8:41:0e:d8:
b8:91:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:01 2025 by rpki-client