Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: YNentLvz8kAvbvbhwNPUa98ZDj2ksD+G2nSt3kUzmac=
Subject key identifier: C3:5E:03:CD:A2:38:BB:3F:AF:23:85:09:E9:63:72:D0:52:56:5B:FE
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 0198D58398DABA10388057F3C661A643F15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: MQeoNh6cN+2SDm73XVrR2SOvthOL7ATd8z1ImTQKY78=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:98:da:ba:10:38:80:57:f3:c6:61:a6:43:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=c35e03cda238bb3faf238509e96372d052565bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:49:de:79:7a:22:f7:1b:1b:a2:bb:cc:6f:a3:
9b:51:6c:af:6d:aa:d3:35:11:5b:dc:79:34:2e:24:
bf:76:83:a0:87:a5:d3:fd:2a:7e:9d:08:60:7f:0f:
64:29:c6:c7:6c:f0:7b:e1:1b:57:e0:b9:02:7a:2e:
94:9c:79:7b:03:0d:4f:a2:88:ca:7e:2c:47:6b:ae:
9d:ea:25:d7:bb:0e:94:8b:4c:c8:d9:ea:ac:4c:d1:
6b:98:ad:24:4b:ff:8a:b3:35:a8:eb:42:83:aa:78:
b3:2d:b9:9a:55:b2:6b:11:58:86:a7:58:e1:c8:d1:
9c:49:32:e4:33:83:1c:8d:7f:65:12:45:c2:69:d3:
6d:69:07:98:3a:84:20:3d:84:7c:e6:ed:5b:6e:9f:
1b:8a:98:1d:3d:78:a1:b5:8f:f0:27:7c:26:60:43:
4b:18:25:d8:e0:4a:22:63:d2:e2:72:12:c4:6f:b1:
82:21:4f:48:15:23:e3:5b:7e:71:37:c5:7f:42:8f:
42:f9:bc:77:41:af:51:50:36:6b:58:0c:fd:ef:9b:
83:31:40:6a:0f:d9:1f:25:3d:78:e1:88:ff:b1:a1:
51:a3:de:10:0f:75:ef:90:d3:9c:f3:08:ea:57:13:
26:dc:8d:f1:98:78:5c:95:42:5c:7b:87:85:ed:9a:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:03:CD:A2:38:BB:3F:AF:23:85:09:E9:63:72:D0:52:56:5B:FE
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:2e:9e:e1:98:da:9a:1e:a7:cb:21:e6:02:4c:bc:9d:82:
ec:f7:49:4d:d1:a1:44:4c:6e:34:ae:26:96:e0:97:53:11:55:
9a:15:a9:b6:76:bd:6a:57:d5:0f:2a:bf:2e:ad:f7:0b:11:cb:
ed:1f:a1:2c:37:8f:60:d0:a8:1f:49:39:60:22:9d:db:f9:c8:
5f:9b:fa:1e:1d:f6:37:ab:60:a2:29:65:5b:d9:e2:ea:97:21:
0e:bd:a0:a4:67:3c:1a:32:22:bd:f4:fe:a7:94:6c:cc:19:af:
f0:5b:46:0d:4e:4a:22:94:b7:48:09:64:6e:a5:3e:78:57:59:
25:e2:2f:2f:00:00:63:1a:20:75:a3:82:c6:be:c0:4c:e0:45:
62:4d:82:16:55:bb:14:1d:85:4f:da:5c:ee:84:1f:ad:7d:a1:
e9:2d:22:69:44:b8:7b:97:67:d7:b1:cb:46:65:5c:ec:02:52:
43:18:90:dd:a5:44:9f:b3:28:60:05:7d:78:73:4c:2b:ca:8d:
ad:9a:5a:98:c9:db:9b:a1:c4:7b:6c:95:86:9f:c0:07:b2:14:
5c:84:da:7b:de:15:71:38:ee:7b:fe:51:a0:1c:0c:41:96:46:
ed:ac:e8:77:59:eb:1b:69:10:76:8b:c2:ef:2b:63:36:26:e5:
68:80:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:46 2025 by rpki-client