Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: /+s04Au/P4Cd8EMcsl5wuEvDUDChidcZB+4IcJSH9Zw=
Subject key identifier: 1F:DD:50:C2:1B:AC:F5:60:09:04:F2:7B:2D:E0:AE:03:01:D8:7B:9D
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 0198D4E09AA5EB00859D329FD433AAAA732B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0D68
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: J0EJ1K+7W1/ZJx9tXvVArnnHnuWDrXdvsLZuCSgL2AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9a:a5:eb:00:85:9d:32:9f:d4:33:aa:aa:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=1fdd50c21bacf5600904f27b2de0ae0301d87b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:bf:ba:a9:ed:59:c0:97:eb:30:c3:75:0a:
19:08:73:df:ac:85:e0:2d:8f:d1:1a:70:2f:40:bc:
88:44:7e:ce:66:73:ef:6b:7c:44:d9:69:44:53:de:
3a:05:ff:1e:f9:9a:fb:4c:c4:b7:72:5b:50:24:59:
1c:3b:c4:25:b4:42:1a:ee:81:c0:79:23:4d:98:24:
cd:d4:7d:5d:8f:05:19:f5:02:a4:e9:3c:00:fc:92:
7b:73:9b:54:35:16:3a:e3:6c:d5:fb:6f:3d:0f:2b:
2d:3b:ed:0e:87:f8:24:fe:e6:a1:ee:9f:07:5c:c4:
19:c5:59:0c:fb:bc:eb:44:1b:5e:35:5b:f9:1d:6c:
63:c7:fe:c9:6c:3f:29:11:99:2d:0d:44:e2:14:79:
62:0c:f1:d1:63:07:4f:43:e9:33:33:76:f5:63:8c:
f2:ab:fc:4b:46:9a:cd:a3:3c:da:96:21:d2:fe:cb:
b2:cf:de:90:fd:d1:8e:a5:dc:db:2b:c8:c7:7e:37:
3d:19:23:08:a6:41:5e:4d:64:db:bb:22:d3:37:52:
31:cf:0b:89:49:7a:a7:c1:5c:8a:76:13:1d:96:a3:
71:ff:c5:f4:2c:1b:62:40:2f:1b:b3:00:27:be:13:
57:6a:e7:b9:e8:88:e5:b8:c3:87:bb:49:1c:cf:6e:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:50:C2:1B:AC:F5:60:09:04:F2:7B:2D:E0:AE:03:01:D8:7B:9D
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:6e:83:89:3f:86:e5:f9:6b:5e:f1:49:2f:3b:28:19:c1:
52:06:d8:51:a4:7e:07:e8:b4:23:d8:5f:1d:e3:56:a7:0d:b7:
fd:39:03:d9:a3:4f:c0:44:a8:ab:ff:93:e1:b6:00:b4:8f:44:
c5:20:8a:85:54:5c:96:3b:82:4d:f0:2e:6f:f0:91:8a:eb:5e:
92:fb:ba:27:3c:39:78:3e:3a:e9:e4:32:61:c1:a4:75:89:3a:
02:06:3e:37:04:29:84:3b:6a:9a:c6:45:c6:bf:0b:ba:80:32:
f5:64:71:24:14:b3:02:34:57:c6:49:34:37:21:10:4d:fd:c0:
94:8e:97:ed:13:d8:32:63:7d:5d:9c:cc:48:2c:ba:57:ae:99:
ff:c8:f5:24:dc:39:83:ad:9d:2b:d8:b4:c3:95:ee:e7:55:2b:
dc:ce:2e:d3:2f:cd:91:e1:83:5f:af:25:74:08:f4:f4:f6:1f:
36:ef:0f:7c:e8:3d:8b:87:66:92:c9:c8:9f:17:a2:5c:9a:61:
a2:7b:da:db:d4:db:73:c7:8a:15:85:2a:e5:03:a3:c7:09:da:
7f:f0:2a:d7:45:af:bd:b0:6b:bd:83:55:0e:58:c4:20:eb:e0:
78:cf:d3:34:cd:6c:78:16:e9:2b:6a:82:77:68:09:e4:e7:1b:
98:3b:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:11 2025 by rpki-client