Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: Ul+/ROy+AhONlyepFRbP2Vq+4vr//onh0rIHTOVMFp0=
Subject key identifier: 5B:7A:5F:56:1B:15:FE:28:B2:68:37:35:13:9B:30:62:BB:F8:12:88
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0198729879C133B18A31C2BD231310C70063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0CFB
Signing time: Mon 04 Aug 2025 01:00:51 +0000
Manifest this update: Mon 04 Aug 2025 01:00:51 +0000
Manifest next update: Tue 05 Aug 2025 01:00:51 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: Z2tetlyRSdF5Ti0MC6ivm4XMtbcFpB2tFCXI5AydoHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:79:c1:33:b1:8a:31:c2:bd:23:13:10:c7:00:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Aug 4 01:00:51 2025 GMT
Not After : Aug 5 01:00:51 2025 GMT
Subject: CN=5b7a5f561b15fe28b2683735139b3062bbf81288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:7c:74:f7:b0:6f:52:0b:f5:96:7b:2c:fb:
7f:73:9d:82:8c:f4:c3:97:30:6a:65:2a:c3:81:cb:
75:ed:26:50:84:7f:4f:df:b9:a1:61:90:21:4a:2d:
bd:00:a3:b2:02:90:e9:79:92:de:0d:15:90:37:e4:
ae:7b:42:76:e0:a3:0f:02:91:71:90:0d:97:d3:3f:
18:e7:b8:69:65:d4:68:cf:bf:66:a6:d7:18:65:4c:
65:8c:90:bd:ab:30:6a:f7:f4:2a:14:d9:09:41:88:
78:db:c9:7c:03:45:09:8f:34:69:eb:36:95:c1:b4:
1f:e8:07:9e:16:63:3b:7c:d2:a9:23:24:d3:ec:72:
27:db:68:24:fe:24:7c:40:8e:07:4c:4c:e3:40:6d:
b1:1d:43:27:12:db:05:1d:6c:5b:31:c1:2b:8d:c6:
29:ed:4a:b3:3a:1d:5f:fa:00:90:8c:fd:12:37:7e:
84:b0:1e:17:ab:ae:49:94:44:a6:87:82:0d:17:90:
24:26:11:81:b2:cb:f9:4e:22:86:fe:4a:10:71:2f:
e2:f2:6b:08:86:46:cb:da:77:fa:f8:7b:91:b7:94:
6b:1c:8d:dd:d0:c2:f3:a7:70:ab:18:fa:16:60:66:
4e:cc:6b:14:07:7a:a1:0c:a9:4f:64:46:99:e8:27:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:5F:56:1B:15:FE:28:B2:68:37:35:13:9B:30:62:BB:F8:12:88
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:40:df:04:97:87:26:6f:6c:8a:d7:61:af:84:ea:f8:74:
a2:1b:e4:82:aa:9a:d5:4d:12:da:15:2f:e1:ee:68:9a:85:29:
81:b9:74:e6:d8:1a:4b:55:8c:17:8c:d4:60:c5:ad:c4:88:c5:
f3:a5:cd:7f:21:b9:70:ae:d3:c8:24:22:bd:c7:55:89:d1:72:
0d:92:54:17:8d:f2:39:43:d1:64:11:de:5a:a1:aa:33:6d:0d:
7b:35:2a:c1:2a:69:6f:55:3c:5a:8a:39:eb:9a:8d:17:d5:7a:
5f:97:63:15:08:82:d2:df:1f:c1:f9:a7:98:e7:4c:14:6d:71:
8f:67:e6:fb:91:69:fe:db:0a:ed:af:ba:8f:07:d6:50:cf:67:
bb:ff:10:9a:1f:a4:67:d1:9e:eb:51:2b:6a:57:84:39:dc:42:
5d:15:f5:10:b3:f0:4f:4b:8a:bd:41:d0:ed:31:5b:bb:4b:ad:
61:5a:f6:40:15:f7:22:bb:84:78:98:83:fc:bf:80:45:66:d7:
9e:3f:21:34:65:0a:49:46:37:c2:97:a9:df:b3:1a:f7:60:fc:
d6:25:55:56:4f:37:7b:c2:78:78:7d:9b:fe:04:e8:97:83:ff:
00:d9:df:9c:e6:85:30:8c:f4:60:de:2f:e4:c4:79:0e:ea:9b:
e7:2b:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:28 2025 by rpki-client