Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: dssruFt3zPp/nZ+47R3jRkLZ9AsUoTy2MFWbpRy+58s=
Subject key identifier: E4:39:B3:B7:22:5E:65:90:C0:E8:BE:79:5A:FE:43:06:56:8B:A1:B7
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01987E663067B2DBD46B71BE9DEBC0A7316F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 08:01:22 +0000
Manifest this update: Wed 06 Aug 2025 08:01:22 +0000
Manifest next update: Thu 07 Aug 2025 08:01:22 +0000
Files and hashes: 1: 60je5SoeoIIvExp08AfHAba81Gg.roa (hash: OYL+m6W/OD3kcGFXK2Ewor0X0LhaICB75RQGsXvyc9g=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: 6cKCrhrVANX/jUBNV6CDaN8R2VHJ87Rd0i9ZbuXmU20=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:30:67:b2:db:d4:6b:71:be:9d:eb:c0:a7:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Aug 6 08:01:22 2025 GMT
Not After : Aug 7 08:01:22 2025 GMT
Subject: CN=e439b3b7225e6590c0e8be795afe4306568ba1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:2e:c4:eb:56:b8:b3:d7:a9:c2:de:55:ea:
df:df:2f:f0:75:ac:ef:f3:ba:aa:ad:42:ed:eb:b2:
2e:04:33:eb:76:48:01:bb:9a:ed:7f:fa:1c:59:55:
f5:20:7e:7e:6d:cb:5c:a9:38:42:9d:7f:21:28:9a:
a1:78:76:11:43:da:8f:da:8b:02:36:7c:7f:0f:b7:
b9:fc:23:2b:75:d5:04:0f:10:ac:4e:40:96:62:d9:
2f:ed:4e:f7:56:e0:6d:c2:14:05:8e:e0:8b:f1:11:
00:8c:8e:0b:9a:85:d6:60:f9:96:c6:fd:8a:a9:83:
7e:a1:1a:0c:4b:b3:f4:eb:c1:75:b1:2c:cc:d6:a6:
03:4a:a4:60:6f:c2:99:e2:4c:e0:7e:b9:fc:da:a7:
e4:4c:70:c4:7d:c5:45:87:3f:c1:46:33:21:a9:bb:
98:96:67:ae:f1:51:c1:d9:1c:0d:e9:e8:49:42:8c:
2f:3d:2e:09:a2:cb:a0:50:ba:38:41:d9:dd:c6:72:
2c:59:29:f0:ef:87:f9:ea:8d:04:02:da:ff:6a:52:
f5:08:ff:75:57:15:8c:c9:8f:43:15:52:8e:6c:c6:
9d:47:e2:3a:ae:43:91:9e:7d:14:5f:b8:54:5b:39:
b2:da:b7:ea:b4:34:a9:85:2f:52:1e:bd:3c:de:d4:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:B3:B7:22:5E:65:90:C0:E8:BE:79:5A:FE:43:06:56:8B:A1:B7
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:e9:62:15:ad:60:bc:bd:9b:fd:10:48:72:28:51:c5:49:
35:48:b9:8f:23:35:11:db:7b:51:96:64:f3:26:58:d1:70:d1:
3e:3f:eb:09:53:a8:5e:8e:95:51:40:4a:3f:6a:be:d6:18:e9:
ca:05:66:99:1d:42:26:f7:50:9f:ce:aa:36:b2:9f:97:58:69:
63:16:23:70:60:0b:6d:0e:7c:14:9f:15:d9:2a:6e:fb:88:2f:
fd:d1:df:ee:ee:09:31:44:43:56:27:80:99:28:04:28:38:c8:
cd:39:b4:4c:c0:38:23:e6:38:c4:a1:80:e8:58:82:b2:ef:63:
d0:e5:ff:3b:50:12:2d:72:af:81:2c:7e:bc:c4:66:41:52:36:
04:85:18:1d:a0:1f:2b:74:24:53:a7:27:02:1c:4b:b2:52:4f:
01:18:de:cb:9e:5b:07:4e:e9:89:b9:de:5f:4b:35:0e:d3:77:
59:a1:75:d7:81:da:ab:7c:38:2d:99:2b:34:99:09:c2:d5:de:
a8:f4:00:96:39:e8:28:69:80:c0:6b:99:2a:d8:d5:48:6d:56:
9e:93:d5:3a:0d:22:9c:82:8f:61:92:69:16:9b:6c:48:1f:8d:
cb:cf:08:2d:b4:0d:eb:34:71:68:cb:44:8f:78:ab:ca:d8:9c:
8a:48:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:31 2025 by rpki-client