Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: 1tHZLq/iClBfAmc0e5eLFJzSCU/qiQev0Qp7WZ2CN1U=
Subject key identifier: D9:13:CE:6E:81:18:E5:6E:46:B5:C2:1B:B8:71:DA:47:DF:A2:C6:03
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019873E308055FC63E9F1A4FD288D5437CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 153A
Signing time: Mon 04 Aug 2025 07:01:55 +0000
Manifest this update: Mon 04 Aug 2025 07:01:55 +0000
Manifest next update: Tue 05 Aug 2025 07:01:55 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: GwCqn3MpyPvZ1JkYVE3E42SywHJLDhuKYth4+Hm6uNE=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:08:05:5f:c6:3e:9f:1a:4f:d2:88:d5:43:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Aug 4 07:01:55 2025 GMT
Not After : Aug 5 07:01:55 2025 GMT
Subject: CN=d913ce6e8118e56e46b5c21bb871da47dfa2c603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:93:6a:eb:98:f3:17:f6:55:2e:75:2f:07:
ff:e1:74:2a:91:df:69:cb:7f:b6:8e:22:88:b5:da:
55:88:4d:04:7a:0c:49:fc:a1:e0:83:ff:52:77:c1:
bf:6c:bf:32:7f:ea:88:01:09:77:4e:52:e0:9a:dc:
4f:a8:66:13:45:59:ad:ce:df:05:24:3f:59:88:2d:
80:55:9e:01:3e:c3:50:c3:70:c3:be:b2:ad:fb:c2:
7d:99:4d:75:d6:74:01:81:47:32:03:93:1c:ea:61:
90:cb:21:fd:5b:ce:27:b5:c9:08:60:67:ed:e3:4f:
16:fc:da:69:6e:d9:ad:64:f3:94:f9:b6:3e:92:50:
07:81:1b:eb:33:f7:12:51:44:b1:99:8d:de:32:e6:
1c:3c:1c:eb:82:5d:2c:aa:55:3c:ee:c9:c6:06:2f:
9a:f3:fc:44:27:50:4e:b1:a4:e5:4d:75:80:3e:10:
e2:f7:f3:8e:0b:7b:28:58:d6:9f:fd:01:39:da:00:
af:a8:46:fa:74:fa:db:4d:98:a1:6b:3d:04:66:75:
a7:37:b4:d7:14:2e:3a:71:6c:0d:de:03:e3:16:d6:
26:4d:7e:7b:9c:0f:71:38:f0:67:67:8b:91:bb:ec:
51:a3:f4:37:40:32:2c:fc:41:1b:7b:be:42:cc:c3:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:CE:6E:81:18:E5:6E:46:B5:C2:1B:B8:71:DA:47:DF:A2:C6:03
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:72:4b:c7:bd:51:26:82:11:be:d7:cd:53:e1:c7:8c:7e:e3:
9a:ec:53:45:07:fb:30:90:21:bd:2f:99:5f:b6:85:90:b8:16:
c7:05:ab:2e:49:13:c6:e8:e3:84:93:d2:f0:59:10:d6:75:79:
bc:d2:ac:39:56:36:ff:73:a3:17:5e:cb:3e:d5:3d:75:f7:bd:
46:03:f8:c2:48:10:75:55:9e:b4:a9:95:90:b9:79:45:02:57:
a6:9d:db:17:78:d5:ff:f0:f8:36:51:4f:ec:dd:cc:e2:72:82:
db:27:83:bb:34:b9:71:37:96:9c:48:73:fc:f2:52:55:4e:81:
43:76:31:71:dc:c9:cd:a4:1f:28:9b:f2:97:a8:80:bd:58:40:
32:0e:f2:2d:6c:6d:46:ec:44:e8:22:24:b8:62:7a:3b:a2:46:
ab:21:69:0f:af:60:5d:88:65:d8:ba:a1:35:5b:81:61:0e:d6:
cc:ff:c9:93:bb:6e:96:80:6a:70:d0:ef:fc:52:b3:f6:4b:be:
60:1a:a0:f0:69:39:13:8c:1c:d6:62:d7:63:cc:d2:17:40:31:
f5:d7:93:1c:3e:70:c7:8c:56:a5:9e:3c:cc:31:72:be:fd:f4:
1e:f9:e8:3a:75:70:73:a8:d5:26:cf:3a:42:48:25:1b:0c:08:
c3:58:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:46 2025 by rpki-client