Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: mBYbCNjreY8UjS3UOw7B4JrLBNhtyP8kXm5PDWhyfYk=
Subject key identifier: AC:70:9E:B7:DD:93:4D:61:E7:00:7B:4C:30:F6:9F:13:A9:14:F0:C3
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 0198D4E05D82A5067292BBA00774D747B844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 029B
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: TPvXOsQLgdaBP9l1n+Fe13yivb+uMGr1/OKiypgXESI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5d:82:a5:06:72:92:bb:a0:07:74:d7:47:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=ac709eb7dd934d61e7007b4c30f69f13a914f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a8:0a:4d:b5:aa:e7:00:3d:79:6b:ee:a6:d5:
f5:7c:c1:64:8c:9c:6f:08:b9:0e:1d:2d:3f:ff:bf:
b2:bb:9f:c6:1d:80:dd:a6:5c:0f:2f:92:1e:aa:44:
c8:13:bc:e9:46:f4:6d:ad:71:12:fc:8c:e2:1e:e5:
34:b4:28:45:b1:e1:cc:a8:0f:94:84:96:21:b9:1c:
5e:ca:57:ce:fd:07:53:1d:34:db:0e:35:0f:bb:d4:
2d:d6:58:d7:64:2d:dc:eb:d7:13:8d:e5:91:81:5e:
b2:33:e1:bb:75:9d:d7:dc:15:ad:2f:55:8a:31:70:
5b:13:a8:88:3f:42:7b:14:97:a0:f1:94:a1:7b:cd:
56:1a:ed:69:82:c4:5b:ef:2c:3b:ce:ef:3c:97:2a:
06:a7:e2:ca:d8:87:2d:a4:c2:2e:63:68:a8:98:c9:
7e:23:99:f2:ca:a5:54:ae:2b:da:fb:3b:dc:d2:be:
22:5f:e2:86:5c:4c:1d:7e:18:0e:20:8e:29:98:0c:
dc:9a:71:2d:6d:09:c8:64:01:51:51:51:42:f1:fd:
81:ee:da:fd:7a:6d:54:1f:9e:69:cb:db:a4:d6:48:
3b:9f:5c:99:0d:cc:91:61:bd:13:26:33:78:f8:92:
55:bc:d0:38:6d:65:4c:15:c1:5b:05:c5:30:7b:a6:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:9E:B7:DD:93:4D:61:E7:00:7B:4C:30:F6:9F:13:A9:14:F0:C3
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:ab:dd:82:3e:1e:41:d4:75:44:06:b8:f8:fd:76:bd:8f:
cd:89:26:87:60:e7:4c:0c:fe:11:51:40:fe:9f:81:7f:05:a7:
b7:d1:ec:0a:5b:10:eb:f7:85:ec:a5:81:90:61:7e:a8:8a:7b:
3c:2f:19:f4:21:54:43:8f:76:f1:34:62:ea:6b:6c:de:47:7b:
1f:04:87:a7:4f:df:ef:30:37:a2:7a:3a:09:82:9d:03:9e:a7:
33:4a:5b:da:28:92:d4:eb:46:7b:18:5e:f6:e2:7b:e8:52:44:
ec:ff:f4:b1:44:03:8d:a1:53:e8:10:69:08:e7:88:47:7b:c4:
7c:22:0e:9c:83:4b:32:97:1b:7f:a3:b8:ac:fd:86:75:da:9b:
f0:03:0e:95:d4:e7:39:84:70:32:ab:8b:e1:2c:a8:74:0c:9c:
34:a7:9c:cd:31:80:ae:be:8a:79:fa:31:93:bd:8c:41:9f:e1:
ac:1d:b4:c9:20:9f:98:a9:47:42:52:75:3d:12:eb:fa:2c:53:
2b:fb:45:10:08:95:60:5a:8c:80:d0:bd:fa:86:86:2d:9f:ea:
3c:80:c4:4a:e9:2f:8a:aa:34:21:45:a9:54:2b:7b:99:59:8d:
e9:ca:01:34:ec:fa:71:95:1c:b9:f3:a1:a7:7b:85:96:60:40:
99:8d:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:46 2025 by rpki-client