Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: +phHMVwm0vtFjpsEFadFlSkrwyCnnskU8eTyXunQzUY=
Subject key identifier: B5:0B:07:CC:50:48:4B:93:9B:5D:33:69:C3:B2:46:9E:2D:DF:FB:7A
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0198741931780D6A33BBA3C8D81E541F4C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 148B
Signing time: Mon 04 Aug 2025 08:01:04 +0000
Manifest this update: Mon 04 Aug 2025 08:01:04 +0000
Manifest next update: Tue 05 Aug 2025 08:01:04 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: xplR/LDlr74vejZX2x6y/lyv6Dbpza9PeYh7UiD4myc=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:31:78:0d:6a:33:bb:a3:c8:d8:1e:54:1f:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Aug 4 08:01:04 2025 GMT
Not After : Aug 5 08:01:04 2025 GMT
Subject: CN=b50b07cc50484b939b5d3369c3b2469e2ddffb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:0f:65:49:da:83:30:d2:ce:e4:44:c2:57:
e6:e7:ff:0a:1e:ba:17:28:ab:0f:a4:7e:e7:0f:ad:
d5:33:65:60:07:f2:e8:16:80:6a:da:72:ea:6e:2a:
0f:ad:11:8a:bb:86:77:ab:38:4d:56:d9:3a:c9:6c:
7f:3c:a6:6a:a0:05:c1:b9:02:14:52:ae:a2:59:b1:
94:89:1f:50:fe:18:81:14:10:06:a4:66:c6:0f:38:
18:c3:ae:3b:1a:5b:fe:4b:84:c0:3c:51:2e:d1:48:
5d:4d:04:c7:2a:35:47:b5:23:2a:f1:34:88:5c:df:
0a:3a:3c:6e:61:9e:ea:43:18:fe:e1:05:f5:15:d3:
94:52:ea:9f:68:10:63:17:62:09:b1:6d:61:c8:4b:
14:95:ef:df:0d:19:06:44:bc:51:e0:3c:93:76:19:
c1:a0:16:5f:34:77:4d:01:4b:b5:2c:ff:8c:5a:c7:
6f:78:12:cd:15:44:65:fb:9c:b5:44:3f:90:b0:ec:
db:3c:9e:e1:57:05:52:b0:7b:59:f7:e2:31:ce:3d:
d0:49:7e:26:e6:78:31:8a:f0:18:01:d2:d0:15:33:
93:2d:20:00:4b:85:5f:8b:b7:7b:a5:13:6b:36:1b:
33:56:a8:8c:46:4d:eb:04:f9:cf:3b:0d:5a:0c:1c:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:07:CC:50:48:4B:93:9B:5D:33:69:C3:B2:46:9E:2D:DF:FB:7A
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3c:43:b3:e0:1a:d0:84:6f:51:95:4f:74:22:66:c3:f0:0c:
12:2d:40:bf:7a:5f:3d:d0:da:d3:83:3f:aa:bb:12:06:e8:1b:
fb:3b:87:18:f9:d9:1b:ba:0b:fe:75:47:95:c8:f9:ca:e7:11:
b9:7b:e2:b4:ef:17:1a:b6:95:d9:98:c4:fd:04:5f:4d:e7:c7:
60:86:4a:a6:68:b9:98:6b:99:1f:34:b6:1f:82:27:6e:44:78:
61:b4:05:0f:bd:15:44:89:01:b4:ea:5d:8b:2f:02:5b:83:03:
d4:63:2d:27:b4:aa:70:33:0a:e1:0e:ca:5c:d8:7f:91:56:80:
51:a4:fe:58:ec:bc:7d:be:d9:fb:85:a3:3b:93:d3:e9:24:0d:
a9:e8:0d:0c:ef:48:c7:eb:eb:3d:59:d8:0c:06:90:9e:d5:87:
c6:a7:b2:0f:11:52:82:57:d1:a3:a8:ad:3d:b3:24:6f:9a:56:
f9:2d:99:80:24:18:16:74:10:ca:31:2f:82:4d:fb:12:b3:65:
1d:53:32:bb:ec:01:72:3f:a0:28:8c:30:c8:f8:4f:74:2c:d8:
18:02:00:6a:15:8e:56:da:cc:35:f1:90:ee:7c:c9:90:15:7e:
84:91:3c:d1:df:1c:ca:1c:ae:82:24:86:4f:95:8b:fe:b0:97:
e8:e9:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:01 2025 by rpki-client