Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: SQ6HatPdxTdVKC0b0N7BthoPgFxqpmmSKDTKZ45LSDk=
Subject key identifier: 5C:71:B1:A0:6B:67:0A:56:3C:2F:08:92:CA:B3:AB:E6:8F:5A:41:C8
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0198D4E053B141DBEBFA941F826D29ACDD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: BDDXbEq49T7AROkRdnTjGfq2p+UtmZP0OYG/j7t0qyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:53:b1:41:db:eb:fa:94:1f:82:6d:29:ac:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=5c71b1a06b670a563c2f0892cab3abe68f5a41c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:2a:a0:93:98:ff:53:e0:b7:bd:3b:45:81:
8d:a6:a9:82:70:8f:77:bc:57:e2:9d:fb:e2:d3:1a:
9f:f4:80:4f:c4:91:04:24:89:60:5c:4f:8a:da:71:
f7:c9:8f:0f:49:e8:4c:6e:b5:b6:1e:6a:22:d9:6e:
c4:3f:c9:92:52:89:09:9a:f2:d7:60:11:0d:69:b8:
82:51:ce:0a:3d:b5:63:b8:67:1c:6c:f2:26:da:2f:
67:62:a6:9c:87:4a:b2:a2:12:b2:5e:10:02:5a:38:
7a:61:4c:c2:e1:5e:47:24:35:99:75:ff:24:0e:87:
67:5d:4e:b6:84:99:f5:cb:6c:b1:27:bf:e6:ec:d8:
4c:d4:97:11:0e:ea:44:b6:55:bf:38:30:13:60:ad:
98:3f:98:e2:ff:59:16:8e:ab:44:9e:16:67:52:71:
a0:b1:f2:6a:dc:9c:e2:2d:89:38:88:04:c5:c0:95:
75:62:11:40:02:cb:16:29:08:dd:83:5a:b2:f4:a6:
87:27:54:4c:f6:9a:00:c2:40:c3:9f:ca:3b:70:31:
c3:08:84:96:a8:62:85:da:5d:98:e6:d8:78:2c:f9:
4e:8a:97:ca:4b:88:10:68:ee:53:9b:7b:f6:99:bd:
6b:63:f3:25:6e:77:98:35:73:a6:49:14:6b:3a:13:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:B1:A0:6B:67:0A:56:3C:2F:08:92:CA:B3:AB:E6:8F:5A:41:C8
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:ac:68:41:db:7b:69:d4:a5:d8:c3:1d:51:a1:87:e4:50:
1a:8a:a7:32:bd:5d:51:b1:b1:77:d4:2d:94:bf:d4:1c:fb:bf:
41:94:0a:8e:36:60:65:3d:7f:36:47:52:ff:3c:3c:7c:db:c7:
67:af:99:4e:d5:ca:41:90:7c:82:84:05:87:c4:cb:d2:2c:f4:
16:06:8e:c0:a1:20:94:7a:bc:49:fb:68:16:28:a0:b3:ea:2e:
fc:ed:20:38:69:90:ed:33:08:8c:ca:f3:79:69:f4:15:e5:c7:
fc:a8:59:85:0e:87:b8:8e:6a:9a:97:8b:19:43:3a:02:97:a4:
99:da:f3:37:52:bc:2b:ab:13:de:84:35:14:5b:a8:08:41:7d:
e1:4c:32:b0:32:ca:01:a3:c4:19:00:a0:77:23:59:ee:50:c4:
6c:34:cd:47:72:01:a2:e6:51:a4:da:96:2b:18:0a:6b:2f:2f:
39:1a:ea:42:8c:38:97:ae:35:0f:67:3d:65:4f:8e:54:b4:99:
38:89:13:e5:54:b6:e9:93:75:e2:26:8f:c2:27:e1:63:ca:61:
3c:1f:e9:1a:74:c5:12:69:3a:ae:4d:14:1a:ad:1e:01:10:f1:
16:f8:51:82:2d:eb:63:2a:85:97:76:fb:e7:0a:64:65:3b:55:
2c:80:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:46 2025 by rpki-client