Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: u/qR7Wm2MxBOBmhBdjAUgLIs2f8JXMYdzFnhZBWmqW8=
Subject key identifier: E1:9A:C2:75:A8:0A:42:57:77:A7:5D:BE:28:F9:0F:10:23:84:6B:90
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 0198D660A76CD25D65E75B20229143874B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: MEdaFDcILpBOZeWAhlqMDFtb8Vsm2RnWHfb7gQyOUxQ=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a7:6c:d2:5d:65:e7:5b:20:22:91:43:87:4b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=e19ac275a80a425777a75dbe28f90f1023846b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:92:96:27:84:a9:1f:28:60:05:a9:16:b2:
7e:1c:18:7d:5d:75:93:7a:41:2f:73:59:4f:fa:b6:
ee:f4:ea:d5:43:f9:35:1e:04:d7:c1:a8:10:f6:4b:
61:c4:da:4b:b3:ea:62:8a:e3:d3:19:9a:e9:da:60:
86:53:e1:d0:bd:10:0e:d6:9b:48:26:9e:04:3f:ce:
4e:36:fd:29:45:ee:ae:32:48:0e:ca:a7:d1:bf:ea:
22:70:36:db:9a:76:8e:05:9a:89:06:bd:4f:a6:ce:
7a:fc:4f:cb:51:96:1c:a5:c3:f9:5b:fd:51:ba:98:
7d:38:83:0f:91:9e:7f:9e:72:f1:89:b4:fa:65:bb:
2d:d7:3a:9f:49:59:7f:c9:b6:90:e9:c5:b3:04:0d:
b2:4c:8d:b2:fe:5c:e1:ba:95:0d:6a:0b:0c:3b:89:
19:2e:9e:fd:84:5b:86:cc:e8:cd:cd:0e:02:12:3d:
5d:47:e9:d0:04:6a:74:1e:20:7d:52:3d:d2:f8:2a:
43:98:28:ca:05:81:38:5c:b1:c5:a1:e5:e3:eb:d4:
7c:fc:79:f6:88:12:a2:ff:eb:3e:98:1c:74:8c:86:
1e:f2:71:b9:21:cb:f0:93:6c:28:89:84:03:32:45:
b0:89:f1:9d:ca:8a:8a:af:c3:c8:a8:b7:af:6d:eb:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:C2:75:A8:0A:42:57:77:A7:5D:BE:28:F9:0F:10:23:84:6B:90
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c4:c4:d4:6e:44:2b:93:80:75:f2:ca:54:d2:32:e5:73:62:
c2:d5:df:e4:d5:cd:01:d3:90:e3:d4:92:17:f0:a4:fe:b2:1e:
45:83:ff:2b:e1:73:b7:42:31:87:de:43:8f:8d:61:c6:24:bd:
1c:02:fc:af:89:51:f7:87:e7:1a:b2:be:95:13:97:9a:b1:a5:
1d:88:4d:6c:ce:26:df:10:74:97:6d:7b:e5:67:1f:7a:0c:ea:
22:39:37:33:0c:15:00:55:39:c7:7c:be:2c:e5:be:fd:92:b0:
07:1c:58:92:3d:25:1c:4e:5e:f0:03:35:3b:43:27:f9:98:29:
53:69:12:ee:65:cc:01:16:44:ea:2a:13:fe:9f:79:97:58:cc:
27:5b:a5:78:e2:0a:50:9b:7d:b3:ae:31:6e:d5:1c:39:0c:a9:
b5:2e:f0:e8:42:7d:fa:b3:b6:f6:41:97:20:59:99:87:31:1e:
e6:0a:6f:2d:13:db:a5:fa:92:64:ab:af:f1:ec:33:a3:08:54:
7b:62:8a:46:b1:44:ea:04:a8:48:28:ec:b6:e4:e7:fd:d2:98:
8e:15:3c:66:8d:3c:bc:7c:3a:6c:3d:b8:f7:00:21:5b:bb:6a:
b7:8b:1e:01:bc:11:c6:ce:21:b3:28:86:98:70:02:91:e4:79:
7f:08:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:41 2025 by rpki-client