Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: KQhlLZlUSRbk4cHs5HXf2tpSsPJkt/A4Cg466CahWzs=
Subject key identifier: AD:47:45:C9:4C:5B:E2:45:A0:65:E5:9C:23:64:61:80:95:66:93:D1
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 01989FA898D0BD7797C6271A131052A30EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 159A
Signing time: Tue 12 Aug 2025 19:01:23 +0000
Manifest this update: Tue 12 Aug 2025 19:01:23 +0000
Manifest next update: Wed 13 Aug 2025 19:01:23 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: ++pV9USCuPRqIzaEX2F+4ob9zMi1U0wrWnMA5pM6FOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:98:d0:bd:77:97:c6:27:1a:13:10:52:a3:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Aug 12 19:01:23 2025 GMT
Not After : Aug 13 19:01:23 2025 GMT
Subject: CN=ad4745c94c5be245a065e59c23646180956693d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:3c:17:cc:4c:5b:bd:9e:c0:c8:8a:d2:61:
12:f7:9b:3d:c8:d5:10:ef:50:9b:98:b5:17:d7:bb:
59:d0:22:e5:7c:35:b1:16:62:bd:f2:35:57:29:72:
0f:18:0e:08:67:57:08:9a:d5:af:d2:c7:9b:05:b0:
53:f3:36:69:fa:0d:1d:91:03:a5:77:39:a0:4b:8d:
f9:52:86:59:54:de:e2:fb:c1:6d:fa:ff:61:c1:ed:
cd:7f:da:08:bb:e0:39:b7:49:8d:58:0a:1a:b9:24:
08:76:96:6b:22:60:16:17:6e:16:fd:30:c2:3c:f2:
0e:92:f1:f3:54:15:b6:9a:e9:70:a1:82:de:b4:ae:
25:c8:96:26:e8:5a:2d:06:97:18:4e:7b:61:0f:71:
43:d7:41:78:98:ac:13:3a:11:33:c9:84:c9:b5:64:
c9:02:62:c8:3d:54:4a:59:c1:59:ba:e5:57:bc:d8:
14:73:14:cb:b1:a2:f2:08:00:15:69:d3:0d:22:d1:
4e:1b:7b:ec:5a:09:d9:bc:5a:57:cd:cc:72:f7:e0:
22:ed:27:4b:f4:83:c5:ee:01:fe:37:02:d8:65:59:
01:8b:a8:41:a7:ff:95:37:e7:a9:e4:e8:e6:95:5f:
03:ba:15:29:a2:4f:ad:26:e8:ac:04:4c:11:84:a0:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:47:45:C9:4C:5B:E2:45:A0:65:E5:9C:23:64:61:80:95:66:93:D1
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fd:a3:6a:6b:6e:57:3a:ac:49:23:b3:e5:e1:0b:35:41:85:
2a:51:18:5c:81:8f:79:2a:54:30:6a:43:e2:a5:f0:79:3a:5b:
13:97:f8:9d:7d:77:17:6c:e8:fb:36:65:5a:10:82:7f:76:c0:
7f:ad:b2:3f:e9:6f:78:c2:ef:68:ad:1d:e8:5b:9f:2c:f1:e3:
54:e3:b0:d3:43:7b:c6:ca:f0:05:1a:82:13:64:24:6a:19:a0:
3a:72:45:27:8a:1f:6d:d8:cd:e1:70:0d:06:82:07:bc:c8:5d:
ec:19:f0:f2:da:96:2c:43:a4:f2:85:99:ad:6f:dd:44:11:fa:
49:d1:fd:c0:30:02:7d:ca:91:2f:a1:ee:db:46:d7:7c:e4:cf:
3b:04:2d:7b:6d:6f:33:dd:d4:ca:d9:d8:fe:7f:f3:a8:d5:1f:
a7:7d:ab:7d:4a:7c:59:5a:59:61:7d:8c:62:95:a9:6c:11:8e:
45:5f:06:20:d9:b4:36:a1:3c:f9:ed:f2:6d:fc:ee:fd:4d:bd:
c7:ae:37:6c:aa:76:ec:20:f8:62:42:54:81:ae:06:ff:70:62:
7d:77:30:a8:e0:84:2a:0f:36:e5:22:3d:08:25:9b:d4:3a:be:
99:06:a0:b0:10:f6:8c:cd:ac:28:39:a6:33:b0:bd:50:6d:04:
c3:45:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:42 2025 by rpki-client