Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: xtJjVclagrp2JA1eZUJwuY1GUeWR72BAExsfXutd4JE=
Subject key identifier: 99:64:8F:D5:E9:44:59:AF:F4:A4:93:21:E2:1D:17:91:9B:C9:A6:4C
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019894B71F5F13AB371F34DA05768DA97F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 16:01:25 +0000
Manifest this update: Sun 10 Aug 2025 16:01:25 +0000
Manifest next update: Mon 11 Aug 2025 16:01:25 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: r8fqVhiKkSOEmj31DZqGJZD2YigKZjm3WDzyZ0FHQww=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:1f:5f:13:ab:37:1f:34:da:05:76:8d:a9:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Aug 10 16:01:25 2025 GMT
Not After : Aug 11 16:01:25 2025 GMT
Subject: CN=99648fd5e94459aff4a49321e21d17919bc9a64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:de:95:65:cc:08:af:6a:ed:74:58:dd:2c:
d5:b1:ea:1d:8c:25:07:61:ad:80:01:04:51:8b:27:
29:58:50:23:d2:0d:ea:93:e5:62:bf:4b:d2:c9:a8:
9a:86:63:74:a5:7b:96:71:21:51:f5:db:ca:df:c1:
33:4a:4f:70:b3:de:a3:7a:d9:54:63:c6:9d:86:8e:
70:74:0f:8e:fe:43:eb:d6:b0:3c:ba:fc:32:7f:12:
dc:4c:fb:12:f3:89:10:4c:a9:0e:58:4a:f8:5f:af:
2c:07:0e:44:dd:d2:0c:50:21:5e:a9:f8:16:0d:c4:
0f:79:2d:ac:ce:ea:d0:5d:d2:1e:be:e0:e1:e1:81:
9d:76:b8:a9:8a:f8:da:eb:e0:84:75:83:3b:5a:f9:
ae:13:36:67:d6:c1:d2:ea:39:73:b3:60:19:84:06:
1c:02:f4:62:b4:1d:a6:a2:04:12:23:77:2f:ae:a7:
72:b7:f8:54:94:80:28:93:25:9a:ee:49:56:2c:59:
ce:23:76:d9:cc:c3:9e:6b:97:38:07:2c:cf:29:91:
2a:7b:91:99:09:08:21:1c:e2:88:a7:d2:d8:aa:e1:
95:ee:47:49:3e:54:47:7a:f4:0f:90:4b:c7:77:b5:
0e:94:df:c3:2e:06:fb:92:fa:12:d5:12:ce:c9:cf:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:8F:D5:E9:44:59:AF:F4:A4:93:21:E2:1D:17:91:9B:C9:A6:4C
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a8:49:9e:b2:92:ce:43:ce:36:dd:bd:ca:bb:01:54:6f:f4:
6d:ec:7f:dc:f5:b7:e3:e6:90:6a:b6:5b:7d:22:5e:ce:a8:38:
5c:f1:f1:2b:33:a9:3d:d8:8f:72:70:2a:32:9e:0d:fc:a6:15:
47:a2:5d:44:bf:1d:a7:44:ff:4f:2f:b5:1b:8c:93:fa:16:7c:
68:ff:60:07:74:91:9e:42:60:4c:6b:db:8e:68:77:26:fd:1f:
5c:d1:10:14:4c:22:52:7b:77:e3:05:d9:15:4f:25:98:be:e6:
2c:9c:86:2e:6b:54:3e:40:ed:33:6a:2e:7e:6e:75:84:74:53:
7d:05:c5:e7:f4:cb:cf:ba:52:04:1c:46:6d:b5:56:a3:5d:f3:
50:68:48:c8:38:b0:99:ff:d2:d4:16:ba:59:01:b1:09:cb:c1:
7c:4c:51:a9:86:e3:fa:cb:c0:53:dc:1f:0e:40:24:03:fa:61:
83:fa:cb:1b:a0:a7:f2:3c:01:e4:cb:c0:c5:97:0b:aa:e7:df:
c0:3c:51:1e:51:d2:03:4c:e4:44:0f:ea:ae:84:52:0b:9d:f4:
18:e0:d8:0b:45:db:41:4f:09:84:f0:58:25:96:ba:e8:7d:be:
36:84:b4:4e:c5:c4:f5:10:a7:19:52:06:14:b9:12:26:49:9b:
e2:8e:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:47:47 2025 by rpki-client