Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: itT2h8a4XpWvCEr3n8LBCD1c4ZrkEo6bF4upntipnIw=
Subject key identifier: 50:52:3F:F1:0A:8A:BA:3F:4A:52:19:1D:1E:AC:47:25:9A:8A:AF:87
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0198D660CA948A55217CC0820C9771F76BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1363
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: hAYxbpp+NSQeeAt76sQx5Y8C1Ad3sQqLZe1V+/ueeR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ca:94:8a:55:21:7c:c0:82:0c:97:71:f7:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=50523ff10a8aba3f4a52191d1eac47259a8aaf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:ac:fb:a2:6b:85:3e:f9:f0:4a:8e:44:5e:
b8:5d:9c:5f:d9:ba:46:e8:f2:ae:8f:a6:c8:b7:4b:
54:ad:87:8c:09:34:78:62:21:6c:37:48:f7:e5:88:
c8:41:41:7a:36:82:bd:80:f6:cd:8e:dc:80:3b:cb:
10:7d:0f:16:db:37:84:9a:36:e7:7f:77:15:08:e9:
70:07:e6:4d:38:e5:01:52:6b:54:8f:26:88:c9:1f:
3c:3f:62:f1:73:90:7c:9f:f4:75:a9:f3:85:d5:9e:
e1:74:92:05:fd:c4:44:7f:b1:73:a5:24:de:2e:6d:
32:77:bc:6c:99:79:ec:db:9c:f6:ac:90:19:96:34:
06:25:cd:db:f7:45:fd:26:7f:1f:2c:61:77:5f:78:
cf:7f:7b:f2:c7:a9:c8:2f:a1:41:13:a0:32:be:b5:
f3:24:6f:3f:b8:d6:ff:ae:91:ab:fe:a9:66:60:34:
d2:b0:1d:7c:af:95:0d:ae:d5:77:1c:80:32:71:fe:
11:31:46:84:75:48:d8:99:a6:02:72:b4:35:61:50:
da:f0:10:1e:e3:7f:e1:ac:cf:61:3a:81:85:cf:48:
5f:c7:a8:dc:e0:f1:b7:e5:8a:d9:25:fc:36:f4:98:
63:9e:fd:4b:cf:52:2a:00:d1:32:3d:92:81:62:d7:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:3F:F1:0A:8A:BA:3F:4A:52:19:1D:1E:AC:47:25:9A:8A:AF:87
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:31:54:af:6c:82:51:08:95:22:05:3d:78:5d:55:12:a9:eb:
05:eb:62:c2:ec:32:29:39:b9:40:46:b7:60:16:e1:78:00:2b:
47:87:33:03:38:a1:97:65:25:ef:73:d1:bf:e6:80:0d:4e:dd:
48:8d:3c:15:34:f2:34:41:21:8f:63:ce:b5:19:09:b4:15:02:
3e:8f:27:d8:15:e4:ba:fc:d3:a8:c2:98:f3:6e:85:86:45:ad:
38:6e:ec:dd:41:d2:b6:21:ca:0a:e0:af:c9:10:56:bf:dd:6e:
00:76:e4:55:25:38:ac:9c:7d:5c:30:86:cd:af:c9:23:25:c5:
21:ff:95:22:b5:50:ec:83:e4:5e:bd:b4:9e:e5:aa:05:9e:43:
bf:6a:3d:cf:ac:84:77:68:c1:c7:e8:18:ce:66:f3:33:dc:a6:
f7:97:e8:c8:d9:28:48:88:78:5a:83:64:20:81:f9:d1:0c:59:
63:c2:23:1e:36:9a:47:b1:4a:11:88:0f:06:f4:9c:72:e2:bd:
8f:b3:2d:27:10:79:06:9f:b5:a7:46:c2:5a:2c:89:58:fa:22:
e2:fb:15:ba:ff:85:a7:5d:2d:3e:eb:11:d8:cc:78:41:3d:e7:
ba:86:09:e2:76:4f:63:f0:22:fe:97:bb:9a:83:0e:2b:a2:65:
c9:41:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:00 2025 by rpki-client