Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: ppj8DkHd9vYFAPGrqFLpAwEenjvvVcXJZVGCcO9dGn0=
Subject key identifier: CD:B8:21:76:BE:29:89:E9:BB:7E:40:F0:5A:03:01:54:AA:BC:6F:CF
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 0198D65F617A03E1B59BF967DD2E82A5C41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 025B
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: GUbgPZS8b1mJVA-CDXEfke3rKwU.roa (hash: DGiTGvvsu+oEkX+7jMPXSS7hmVWxoFzlEXAOHRpDGto=)
2: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: viy+xik36IFrlwNqatyWDchG9b7wwM+3NfXDaok3hEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:61:7a:03:e1:b5:9b:f9:67:dd:2e:82:a5:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=cdb82176be2989e9bb7e40f05a030154aabc6fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:52:21:33:5d:a1:ac:e8:a5:ea:19:62:19:
a9:75:50:15:e4:fd:9f:2b:9c:68:5c:eb:04:a7:be:
df:d9:e8:a1:2e:ce:5f:51:39:e8:73:0e:0f:cb:99:
16:fd:d3:b6:f6:14:52:0b:4f:b5:98:6b:64:f4:a8:
02:ed:a5:36:33:d2:1f:99:9e:c9:1c:ef:dd:07:19:
a1:9f:96:b4:26:2c:6d:0e:2c:2e:19:e4:85:4f:f5:
8c:f1:df:88:2c:a1:cf:cf:96:8e:ed:d8:9c:5f:ce:
92:0e:39:b7:b3:c2:da:79:94:ab:4c:1b:13:5b:70:
2e:49:dc:6b:39:ba:56:91:71:d5:93:f2:e6:96:51:
a4:5a:b8:d8:81:1f:fc:c0:0f:ae:4f:6b:d2:d2:6e:
f6:3a:ad:5c:0a:1d:89:d4:b1:b6:16:82:44:66:99:
dd:55:5a:c9:30:13:ae:bf:5b:6d:53:22:35:6c:8e:
65:0d:43:f3:bf:da:d2:7d:ee:b0:3f:18:93:55:53:
cb:f7:d4:bb:85:04:90:80:cf:f5:ed:5a:a3:5b:b0:
6f:48:87:af:74:16:c0:81:2b:d1:cb:15:74:b9:56:
1a:d2:e0:d0:28:53:d4:6e:71:24:3b:9b:ae:f6:df:
27:53:1f:c5:db:02:70:45:98:53:1b:82:94:74:d6:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:21:76:BE:29:89:E9:BB:7E:40:F0:5A:03:01:54:AA:BC:6F:CF
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:a5:df:16:0c:a6:5d:37:22:70:73:ac:d5:1c:a4:95:45:
6d:70:83:6e:18:24:26:fc:05:ca:46:fc:7c:37:54:ba:50:c0:
3c:71:e2:fa:52:34:08:60:86:68:74:38:96:3f:16:ed:f7:68:
98:0b:09:3e:e3:26:f5:12:ac:9c:42:5a:6d:a7:d8:f6:3e:f3:
73:6c:c8:5d:e0:65:6a:d9:00:69:0a:4e:87:30:96:64:e6:21:
fa:d6:7e:f7:2f:3c:43:6d:3b:7b:23:4c:6c:85:cf:85:ba:97:
b0:32:b0:99:b9:4d:6e:05:37:b2:a5:ad:4a:91:86:94:6d:e6:
7b:62:4b:94:53:8f:31:56:db:31:86:00:f4:bb:42:af:2c:18:
5b:41:c6:a7:b0:e3:94:44:94:95:5b:2c:64:8d:d5:a5:60:d1:
9e:26:e4:0b:2c:cd:78:4e:f7:13:eb:fe:d9:0d:3c:c0:6d:0f:
f9:2a:c1:da:9f:19:c4:7f:d4:a3:fc:e4:61:f0:79:d9:f6:b7:
be:77:19:79:d3:6a:92:f2:7b:53:02:05:2a:71:d1:b1:5c:08:
bf:94:a2:c2:73:04:b2:d0:80:c0:69:38:ef:fb:ae:26:d1:f4:
1b:6b:5f:4a:fb:17:24:7a:60:5a:9d:c7:3b:ba:44:73:40:29:
f7:bc:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:23 2025 by rpki-client