Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: n/lf+w/JxMdnAjNY6LMCLUEdyo0quVGqSDWtpGuh3Qs=
Subject key identifier: B7:7C:BF:A1:86:3C:E3:FB:34:52:92:A8:39:73:06:87:B6:AE:FE:15
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0198D515917AC6ABBD5FB75F655BC0332421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0E16
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: htrvdlc2SGSTlghrNIHj/wdyX3VR3Qfpa6atH05Ikks=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:91:7a:c6:ab:bd:5f:b7:5f:65:5b:c0:33:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=b77cbfa1863ce3fb345292a839730687b6aefe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:05:21:21:00:b6:2f:da:25:db:b7:4e:96:
d2:a9:04:a6:5b:54:43:cf:ac:1f:43:58:69:92:e5:
b9:1b:03:fb:5f:a3:c8:df:97:1c:12:c9:44:3c:65:
17:03:5e:fa:fa:6c:ca:b9:4a:1a:49:ad:57:c7:70:
88:5d:0b:97:2f:0d:a9:33:14:96:c4:dd:35:be:3e:
f8:c6:97:6a:52:b2:7f:92:f4:45:d5:30:af:5e:ee:
51:06:e6:f9:d1:54:43:fa:c7:d2:0e:4a:ab:70:0a:
d9:5a:b1:53:71:ab:0a:32:f1:8c:14:db:ca:c6:67:
e5:e8:51:f9:be:a5:c3:8a:b5:cc:8f:00:14:08:3c:
b1:45:e6:3a:97:81:78:7f:9a:42:21:b8:5f:02:ce:
30:d9:ec:0e:08:28:a3:3c:7c:eb:48:36:aa:26:a2:
24:91:4c:fc:ae:ec:25:06:cc:73:a8:4b:95:9f:df:
81:a5:ca:5a:f2:bb:9f:37:ed:75:e6:7b:e9:aa:be:
a3:a6:73:96:33:41:80:54:00:73:3d:0b:0a:3c:22:
36:31:da:92:16:43:8b:8b:4d:87:cf:66:35:18:ea:
11:05:bf:a3:7d:49:1d:6e:30:8a:de:58:89:1e:e3:
5b:6e:8f:fc:f2:a4:85:e4:b4:04:91:c7:ef:71:0d:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:BF:A1:86:3C:E3:FB:34:52:92:A8:39:73:06:87:B6:AE:FE:15
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:56:ac:28:e8:7b:cd:24:6f:c6:be:a9:d0:ef:9e:fd:d2:89:
80:bf:3a:aa:30:3c:8e:ae:88:4e:4d:b9:99:48:09:09:3e:35:
07:45:0d:29:52:8f:78:79:17:9e:35:9a:70:4a:ee:90:8b:50:
cb:84:2f:24:91:d8:cf:1d:5b:82:c0:23:6b:79:29:db:fe:ae:
7a:b2:f6:41:96:ad:83:ee:e8:f6:1a:c1:f2:9a:fa:df:d0:e8:
ea:7d:ea:73:89:37:81:2c:3d:6b:47:6a:db:b1:fa:26:bf:29:
ee:46:97:dd:2d:a9:92:ef:65:51:97:8b:e2:0b:a7:c2:96:a5:
01:40:90:b3:19:ec:2b:8f:2a:93:4c:0c:5b:b8:47:4f:2f:55:
42:c6:be:48:da:c2:81:4a:28:ec:e7:0a:c1:c8:9c:81:4a:7a:
9a:af:e5:b4:b9:c0:6a:2b:9f:fa:50:73:d3:5f:72:c9:eb:7d:
80:d7:da:f2:58:13:88:2b:c8:d1:02:c8:fb:9e:95:7c:9c:6d:
49:6b:b5:de:a6:b3:e3:53:ef:c8:dd:a7:d7:3f:03:86:38:06:
7c:f8:e7:84:e3:b4:f8:c2:06:61:6c:14:26:c4:cf:96:c7:ab:
d0:1f:8c:40:66:ff:d2:17:31:ce:c5:5a:dd:ce:25:cc:02:58:
be:a7:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:56 2025 by rpki-client