Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: I2eGckx6OBBAumES9cYlCJw3VNwYzrmxnchc+ncU6hE=
Subject key identifier: 2F:13:6E:8E:40:F6:90:B0:D4:A4:47:1E:16:6B:31:CE:99:F2:41:B2
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 0198D58390184BACAD46CB04F5EDDB7C2993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 1351
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: KxP1O5qRE1FAyfiIUE/FzaPUsfi0Br6kaGRG3qT9Tu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:18:4b:ac:ad:46:cb:04:f5:ed:db:7c:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=2f136e8e40f690b0d4a4471e166b31ce99f241b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:ad:04:ca:53:e8:73:68:a4:d8:f1:26:48:
13:ec:ab:42:f4:7d:4d:7e:19:97:39:64:5e:0e:70:
21:d0:d3:b9:6c:1e:63:6c:34:a3:06:f9:e7:2f:a8:
90:ac:45:2c:1b:89:6c:46:6f:a4:bb:e3:ab:39:74:
f7:47:1a:4d:cd:09:3d:55:c7:fe:a0:3b:0e:dd:70:
c3:82:98:9b:ae:96:3f:e1:b0:43:8e:4c:48:d0:8a:
b6:9f:d2:2a:f3:82:3b:0c:b7:6a:18:d2:4f:19:12:
fb:1a:14:f1:08:cf:8c:ad:b8:54:1a:36:18:3c:fb:
9a:6a:a1:94:c1:fa:4c:c2:71:fa:c7:85:39:be:c9:
de:37:fe:fe:ae:e5:28:31:ff:1c:ed:15:2d:7f:28:
f9:20:46:9b:1b:2d:bf:aa:59:92:ac:31:81:f5:8a:
50:06:d9:50:72:95:cc:9c:66:4c:3b:4f:cf:6c:1b:
dc:f6:d2:df:24:1c:89:c9:f7:ff:28:22:11:24:ae:
4d:5c:be:59:92:a7:a4:56:2e:fc:53:6d:ba:08:f8:
7f:b8:00:cd:88:48:06:1b:2e:f6:6d:a5:93:33:8f:
41:ab:e9:c5:35:1b:3f:ae:7d:9e:1c:66:eb:79:07:
46:1e:d7:4b:aa:59:0d:6f:ae:55:a2:8f:c8:f0:d0:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:6E:8E:40:F6:90:B0:D4:A4:47:1E:16:6B:31:CE:99:F2:41:B2
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0f:0e:60:27:8d:d0:a3:73:25:43:7b:2f:df:46:3e:ac:6c:
3d:e2:09:00:58:f5:eb:b4:9c:d8:6c:55:f5:53:54:ac:aa:4a:
f0:a9:8d:ca:dd:54:84:4d:67:c6:d8:16:fc:2d:ea:a8:7b:91:
68:97:88:f8:1f:52:ef:e6:7d:e1:d5:ba:65:71:3a:90:f9:27:
ca:3e:af:be:31:1c:52:23:0f:e2:47:99:b6:72:eb:79:55:09:
b1:a8:79:75:f6:c1:06:6c:d1:07:64:6b:d2:13:7e:2e:cb:3c:
9f:1c:83:73:c5:e8:45:79:7c:5a:3c:48:12:4f:a5:5f:55:90:
91:4a:a4:05:af:d9:21:45:75:01:ea:95:1f:cc:49:9c:48:0f:
75:01:e5:59:76:0d:05:af:a9:68:4b:72:c3:55:7d:30:87:02:
a1:8d:6e:8c:19:12:a4:19:16:17:34:30:c5:45:17:69:14:cd:
21:0d:2b:e8:45:8c:bd:a8:98:c1:06:76:55:a1:6b:cd:fb:2d:
fe:50:4f:5d:6a:4b:4a:d1:f5:ff:19:cc:4f:61:a3:02:6a:18:
93:70:7b:87:31:7a:c8:d6:a4:c2:e8:95:a3:95:6a:c2:36:11:
20:82:42:15:c1:ce:fb:98:30:46:0e:17:d1:93:0c:8d:95:ae:
12:3f:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:09 2025 by rpki-client