Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: Poy3kw8E64aRgQZ7piYPzLIto7aU7BReQMQYwcB7dBc=
Subject key identifier: DE:EF:3A:C3:7D:9C:3F:CC:8A:62:C0:FB:58:18:06:D0:C6:1B:2C:41
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 0198D4E061474E42653401E8612D87D18EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: XAX2be0EjXOWn+zSX7z+MJL3Cek/U72n2QBceBdTf8M=)
2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:61:47:4e:42:65:34:01:e8:61:2d:87:d1:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=deef3ac37d9c3fcc8a62c0fb581806d0c61b2c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:94:f3:6d:da:52:a8:87:f7:77:af:50:b8:
6f:82:d5:5b:55:93:d5:f9:a9:28:b5:a5:ca:ea:88:
51:78:c2:e4:7f:83:d8:bc:fe:03:75:da:a8:71:81:
c9:7b:56:a1:22:7d:28:e6:a2:ad:24:f7:34:6d:39:
61:7d:0e:ec:dd:50:50:00:68:74:37:b2:38:82:26:
c6:99:0a:52:e2:b7:99:5e:30:d7:c1:ff:20:01:61:
b3:6e:f0:bb:72:32:09:1c:c2:1c:96:f6:69:9f:71:
af:41:e9:21:78:1e:c0:30:1c:50:81:ec:bb:ab:af:
e2:bd:bd:83:30:df:7a:50:8e:f4:b9:6d:8c:db:77:
1e:4b:1f:6c:5d:fb:a0:79:01:fc:bd:0a:8e:60:e6:
23:dc:ee:ad:d8:58:14:7a:7e:bd:3b:1b:29:c3:9e:
bf:13:f4:92:20:4d:ce:ab:7a:94:ed:c6:f3:f3:ee:
6d:af:55:36:ff:f2:4c:84:32:a9:b9:3e:e7:92:2e:
e1:b9:6c:e5:da:0e:b3:40:06:26:57:eb:ef:c3:1b:
64:61:17:38:2e:7c:69:76:9c:cb:b4:2c:d7:bc:4c:
47:8a:b4:a0:9f:e8:d3:94:6e:34:a6:65:4e:bf:1f:
f4:9f:49:fb:fd:f6:69:72:49:f8:94:61:bc:13:54:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:3A:C3:7D:9C:3F:CC:8A:62:C0:FB:58:18:06:D0:C6:1B:2C:41
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:89:e1:9f:81:a4:86:39:88:79:b6:d3:a7:0c:c2:21:69:
ca:4f:39:f6:90:4c:71:93:0c:95:09:42:5d:4a:77:43:12:c2:
e5:8e:a2:7e:59:36:90:ce:62:76:ad:d9:d2:18:6e:c4:f4:d8:
10:39:7f:32:1d:1b:b7:95:c5:e1:93:6c:6d:0d:ea:96:b1:f8:
46:ef:c4:8d:c4:9c:84:ca:f1:10:c4:db:90:fa:b8:97:9c:84:
a3:c2:36:5f:f0:72:3d:9a:f4:d4:7a:6c:50:2d:30:51:e0:95:
35:6d:15:4d:bd:b7:b7:0a:63:61:f6:f9:5a:61:6d:e0:7d:85:
7b:d1:ae:82:12:c1:40:3f:0b:9d:0a:29:23:a2:51:e0:e0:f6:
df:b3:de:8a:48:33:0d:42:f4:08:85:19:a0:a9:03:a8:a4:ff:
60:03:9c:4c:8b:3c:27:0a:5f:47:98:b8:ca:6c:39:6f:91:d8:
90:e6:29:43:b7:7b:c3:57:81:b9:1f:38:d5:49:0a:f8:11:56:
09:62:6e:b0:50:fb:12:e3:5a:c3:61:4a:c8:f5:51:28:72:d9:
5f:40:47:6a:ae:18:36:6b:e1:55:ae:1f:3b:12:82:97:c4:99:
fb:71:ae:6a:29:1d:4e:05:f5:26:39:af:e2:d6:df:b0:1c:e4:
df:24:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:29 2025 by rpki-client