Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: Zr9c+Hft63WB2tPB38hl2Z7mgOkYFCKpKtXzLEp5ea8=
Subject key identifier: DB:0E:0F:65:DD:2A:02:B0:F9:CE:9E:58:C6:E7:22:E6:A1:5B:4B:C3
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01989223144A0B0EA976E79AA84ABD4FD6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 115C
Signing time: Sun 10 Aug 2025 04:00:29 +0000
Manifest this update: Sun 10 Aug 2025 04:00:29 +0000
Manifest next update: Mon 11 Aug 2025 04:00:29 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: DpJS4oMDDzUG3yqdbcuFbNdYqgWQ8plwPWU4D/SRFkk=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:14:4a:0b:0e:a9:76:e7:9a:a8:4a:bd:4f:d6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Aug 10 04:00:29 2025 GMT
Not After : Aug 11 04:00:29 2025 GMT
Subject: CN=db0e0f65dd2a02b0f9ce9e58c6e722e6a15b4bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:67:d8:b8:11:6a:4c:64:02:71:46:c6:6f:
6a:d6:d7:2c:51:97:d7:81:f5:08:82:a7:3e:89:59:
0b:f1:15:94:93:86:8a:a7:56:57:3c:0e:59:22:2c:
4b:11:ba:ad:34:ce:52:4c:29:12:28:f9:74:29:7a:
5f:78:28:51:09:fe:63:e7:6b:61:8a:8b:2a:29:bf:
0c:0d:de:55:76:56:b3:8b:b3:df:44:b7:f0:c9:3d:
b8:22:9d:67:02:5f:e0:25:be:4e:e8:06:4b:e4:14:
a9:bf:9b:88:96:77:84:a1:1e:d2:1b:bc:b2:56:9b:
ac:30:9b:37:4a:9b:e8:4c:29:bf:4d:a2:f3:2e:d3:
41:b9:30:97:55:d8:f3:0a:b9:e0:e0:c1:fc:5e:f3:
a4:51:ec:47:ad:6d:81:51:34:03:28:d5:18:4e:b6:
c5:b1:c1:6e:4a:08:60:18:4f:6c:ef:2e:ef:87:2b:
4e:d4:cf:5c:a2:c6:64:a3:b7:81:f9:07:49:c6:b5:
5e:80:29:d4:8c:61:ee:50:4f:09:91:f8:3c:22:f1:
8d:a5:c2:73:d2:6b:6e:8b:e7:38:04:79:c1:82:06:
cb:ba:b1:6e:a8:3b:c5:ac:eb:c6:40:4b:5b:06:c5:
27:64:d5:23:60:29:15:35:40:4f:bd:98:91:3c:32:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:0F:65:DD:2A:02:B0:F9:CE:9E:58:C6:E7:22:E6:A1:5B:4B:C3
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:0e:6b:74:72:76:0c:1f:76:f5:44:48:c4:4b:59:b5:cb:
b9:49:50:48:fa:20:6d:42:bf:61:aa:44:c6:74:06:a4:3d:7c:
59:c4:cc:8b:fb:52:d0:1f:03:92:9e:01:d7:8c:3a:1f:2b:ff:
38:11:5f:a6:1e:e7:12:3f:88:2f:50:c2:bf:74:68:27:19:f1:
27:98:90:4f:a7:c3:01:88:d5:71:64:53:63:aa:2a:dd:c5:61:
cc:c4:60:52:14:18:49:02:7f:5d:ad:78:f5:4b:d5:ef:63:39:
e1:be:a9:70:a2:82:bc:96:b2:90:17:67:2d:70:be:b7:09:f9:
89:a6:f7:ab:a7:1c:87:a6:b0:82:0b:83:57:4e:ee:81:6f:0e:
9a:12:95:a0:82:48:61:9d:63:fe:5c:03:92:e0:c3:59:3b:6c:
77:a4:5a:66:1b:46:e6:3b:82:ff:32:22:94:98:9b:de:e3:7a:
4a:a1:e2:f1:10:95:e3:c1:d5:82:89:6c:0a:3d:d4:aa:53:52:
19:af:be:f9:92:78:d8:45:e4:d8:2b:7c:7d:11:eb:73:70:12:
b6:33:52:54:09:7e:59:e3:f4:75:d3:6f:71:40:76:1d:9f:2d:
15:0d:42:bd:bd:bf:a4:7f:a6:9b:ef:c5:d4:14:91:78:ce:c1:
52:a7:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:39:28 2025 by rpki-client