Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: smQDKnvpQOWRZtO9HM6AsTDbfJJvKRJQu2sB0eHQXQE=
Subject key identifier: 4E:90:95:A6:A7:E8:92:50:A7:24:E0:AD:1A:C5:BC:86:E8:66:24:BC
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 0198820B8B99EC5963742DE2AB01B2C9B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 0136
Signing time: Thu 07 Aug 2025 01:00:51 +0000
Manifest this update: Thu 07 Aug 2025 01:00:51 +0000
Manifest next update: Fri 08 Aug 2025 01:00:51 +0000
Files and hashes: 1: HnXYP_nGkSYGI2gsUnR5joaBv0k.roa (hash: QHASI9erDv03GyXaVaSPKxwrTHTkAuv0FPn5tlS8GC8=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: 2aOKqnBV+IswIBQjJvbKMcV4eXdLxZe6uGR7StIeRq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:8b:99:ec:59:63:74:2d:e2:ab:01:b2:c9:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Aug 7 01:00:51 2025 GMT
Not After : Aug 8 01:00:51 2025 GMT
Subject: CN=4e9095a6a7e89250a724e0ad1ac5bc86e86624bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:86:fa:7e:24:03:fe:e9:3e:c9:fe:1b:4b:
d0:7e:30:a8:ea:ce:dc:35:77:b1:3d:6e:60:bc:db:
cb:56:98:3a:d8:27:26:4a:02:08:1e:b2:0c:1f:c2:
6f:09:2e:bc:71:a1:98:d8:a5:78:42:af:ed:b3:0b:
43:ee:f0:5c:14:e5:85:3e:9f:83:d7:16:54:8e:c8:
d3:4a:35:e6:0f:2f:1d:ea:90:6f:87:0c:d3:fd:0f:
35:ae:21:ec:01:d3:1a:75:a3:57:21:ff:cb:f8:2d:
ea:3e:63:0c:18:5a:cd:22:a7:3d:4e:bb:b6:6b:d5:
bb:03:89:02:69:25:f6:5a:9a:b6:41:d9:0d:2c:56:
ea:03:3c:bf:8e:98:5a:95:83:fe:09:78:04:59:60:
0c:1d:05:19:8d:fb:49:06:cf:05:5d:72:08:5a:ee:
0f:ce:a1:46:ee:9e:0c:13:a7:19:d7:93:97:97:44:
03:46:4a:5a:cd:ba:d4:d1:53:aa:89:4b:dd:01:fc:
e4:0a:0a:d6:db:4d:c5:32:34:dc:be:1d:98:c4:dd:
45:bb:15:11:d9:a3:51:8d:72:25:d6:29:23:9b:c1:
97:67:98:c8:b0:f5:11:25:7e:79:d9:90:ee:a2:33:
4c:e9:35:be:7d:1a:32:fe:1b:e8:6d:67:e5:68:d7:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:95:A6:A7:E8:92:50:A7:24:E0:AD:1A:C5:BC:86:E8:66:24:BC
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:70:3b:3b:6e:83:ab:4b:01:aa:26:20:d8:cc:6e:0e:ec:ed:
b9:e2:28:73:fb:30:96:34:2c:d2:71:d2:08:32:56:44:0f:ef:
34:eb:8b:b6:c3:ad:73:35:f0:72:88:43:0e:69:79:0c:a1:8c:
35:5e:3f:cc:5f:78:fa:84:4b:ff:76:52:74:d2:7a:a7:60:16:
fb:e3:53:75:d4:4a:55:12:9a:aa:89:93:d6:e3:2b:d8:98:9d:
64:5f:89:6e:c3:27:5d:f0:78:f7:b9:ff:91:0c:6a:c0:24:22:
58:ae:aa:ff:7a:fb:89:e8:0e:8c:3f:8a:20:09:71:37:ce:73:
db:1e:bf:66:a9:66:4e:c2:af:96:51:5c:83:ca:80:36:5a:69:
e8:b1:28:81:58:1d:7c:a0:d3:9e:72:fa:8c:70:9f:a4:16:5a:
fd:4d:2e:98:f3:9f:53:37:d8:18:b3:90:4c:b0:82:3d:ab:28:
86:1c:f9:14:21:55:14:42:5f:b9:67:75:82:c9:ca:b3:17:d9:
ac:7e:c5:8f:a7:25:4a:2a:6f:42:9b:8e:fe:c6:30:16:d6:75:
a7:ee:b3:10:2e:3f:d2:70:f9:05:8b:31:d7:d2:da:40:0b:6a:
59:da:09:f4:d7:a1:03:ce:ae:0f:62:0b:db:43:b5:da:c4:a8:
22:23:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:24 2025 by rpki-client