Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: iqxHMQUc1mY+Bb1+ONPP38LbM9zLOUFA6ERciyxcFJA=
Subject key identifier: 9F:EF:D4:BC:C1:4F:22:7B:83:BC:C0:6D:AF:C9:46:89:17:84:E7:AE
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01988BB38FFC75587C6C743839E5EF7699DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1334
Signing time: Fri 08 Aug 2025 22:00:57 +0000
Manifest this update: Fri 08 Aug 2025 22:00:57 +0000
Manifest next update: Sat 09 Aug 2025 22:00:57 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: SJvtsqPAe+RwyibUUR/uYsPGB1chIPufBFHao08/SbY=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:8f:fc:75:58:7c:6c:74:38:39:e5:ef:76:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Aug 8 22:00:57 2025 GMT
Not After : Aug 9 22:00:57 2025 GMT
Subject: CN=9fefd4bcc14f227b83bcc06dafc946891784e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:76:75:82:23:4c:4d:01:ba:8a:72:3f:c8:
80:d1:f9:24:84:00:4d:65:9d:d2:c0:63:cb:7d:ef:
03:e0:52:60:e5:f7:f2:1c:01:2e:d7:7d:98:a0:0e:
d6:bf:e2:7e:ba:ca:54:51:21:58:5a:eb:9a:e0:46:
fe:f8:c0:0a:5a:84:16:b0:c7:75:c1:0a:e6:ad:0c:
bc:09:33:69:f3:d9:df:68:cd:f7:09:38:02:4f:e2:
44:ae:23:9c:9a:d0:c4:25:67:a7:2d:db:8b:06:5e:
eb:03:b2:dd:46:16:2a:da:41:f1:c8:da:a8:14:3d:
f8:05:83:08:02:5c:e0:75:53:b9:89:20:62:85:2f:
5c:bf:7f:0e:e7:32:41:a9:ca:7c:66:78:5a:4f:69:
53:cb:5d:99:d7:33:35:ec:0c:ee:aa:13:d4:dc:e8:
b3:b0:ff:f5:4e:29:48:5b:b6:db:28:02:d6:4e:57:
19:57:8c:bc:8e:99:0d:79:ee:9d:ad:ab:04:d6:ec:
3d:9b:71:d8:67:fb:4a:10:2a:d3:f1:ac:da:2f:e5:
64:bd:51:7b:ae:1b:f7:ee:dc:5f:1e:ec:5a:eb:97:
61:1b:6b:40:f9:85:49:a1:01:18:32:4c:fa:48:81:
9f:ab:1c:f6:0a:71:55:26:ef:a7:ad:53:a7:06:2a:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:D4:BC:C1:4F:22:7B:83:BC:C0:6D:AF:C9:46:89:17:84:E7:AE
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:5f:d8:3a:ee:3e:3f:d5:ba:4d:ad:e8:cc:e9:18:18:85:
c9:f6:a1:cd:ff:40:0d:32:ab:44:be:e8:d7:0f:77:b8:b3:62:
47:4e:45:cb:1a:49:14:56:91:30:e7:41:d1:f8:f4:fa:b8:a4:
d2:9d:be:cc:f4:89:84:6b:ca:76:c3:18:69:2e:21:16:fb:2d:
22:9c:e6:a5:1c:70:20:8e:6d:fe:81:f5:39:08:01:4d:10:f3:
55:9d:bd:da:95:61:88:4e:2c:67:22:cc:4c:70:01:aa:d7:7e:
15:1c:30:2d:82:60:7e:f7:64:94:e0:ab:99:5e:7b:e4:cf:06:
f9:fd:1e:3a:aa:4c:dd:4c:f9:94:a0:67:e3:28:49:af:5f:58:
c0:13:ac:82:2b:15:59:a4:09:aa:da:4e:37:53:f8:4a:41:7c:
7d:69:97:20:6a:85:64:d5:41:05:f8:b9:b0:c9:c3:7d:5e:aa:
01:8c:d9:48:4f:d8:36:96:2e:e4:d0:b2:91:3b:2a:28:14:ca:
23:de:41:d6:02:48:73:20:6c:9c:67:62:16:09:59:ab:16:c6:
f6:53:57:a8:82:51:62:44:2f:57:ca:0e:ee:30:0e:a0:42:d7:
2e:1b:67:31:3a:56:58:06:77:77:1f:04:7b:96:28:df:21:1e:
a6:4b:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:10 2025 by rpki-client