
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File: XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier: AFgbmsPM0asSB7n4G7weMQvGn22L2gZWkvSgN/qrjK4=
Subject key identifier: DF:29:F8:D1:7F:DA:27:70:79:3C:1A:4C:20:99:FB:71:CB:B6:E9:43
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 01987E2F2A4D380A24D3C597E77537B4FF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number: 0DCC
Signing time: Wed 06 Aug 2025 07:01:16 +0000
Manifest this update: Wed 06 Aug 2025 07:01:16 +0000
Manifest next update: Thu 07 Aug 2025 07:01:16 +0000
Files and hashes: 1: 8rSm2TYmCggVgedhJYf2d5mO9bY.roa (hash: u5F6NWnwd9MOKoxteUtWCw1+tPwzMsMfG5qFtnCO6pk=)
2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: crXru7876vv20viemO/Gi1O5eTjoufEYJ/v6O8UJem4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:2a:4d:38:0a:24:d3:c5:97:e7:75:37:b4:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Aug 6 07:01:16 2025 GMT
Not After : Aug 7 07:01:16 2025 GMT
Subject: CN=df29f8d17fda2770793c1a4c2099fb71cbb6e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e3:d7:c6:b2:4c:0c:a7:a9:66:86:dd:cd:78:
5d:e5:4d:8e:5d:a3:b5:77:5e:c4:8b:74:3d:2f:47:
c6:56:fb:af:da:eb:d7:87:a5:52:6d:10:c3:ed:5a:
eb:62:9f:96:35:57:27:4d:1c:85:a0:a5:3e:33:99:
62:ea:5a:65:8d:59:fa:99:73:b1:ba:20:79:24:25:
e7:1d:33:51:37:6a:7a:86:de:d3:58:af:38:dd:f1:
b0:4d:33:12:85:4a:07:4f:3f:26:ae:07:c5:63:3a:
36:5f:e7:9e:52:be:7e:98:81:f3:67:21:2e:30:08:
0b:65:fb:bb:95:6f:36:39:37:c5:e8:13:79:bd:c6:
42:54:82:e6:ee:d7:a7:51:3e:f5:b5:9a:9c:44:bb:
8b:4a:61:63:97:0f:ea:46:de:e1:6f:56:54:f5:da:
1e:78:d2:09:18:75:97:b2:04:b5:3e:49:2d:35:6c:
e3:d4:e0:a3:3f:97:c5:4a:40:36:48:5c:f1:d0:fa:
3b:a9:38:74:73:57:c1:96:65:a2:ff:c0:7a:52:e2:
c3:6a:e5:49:96:51:cb:f1:a4:93:47:d9:2b:5b:bc:
18:54:5f:3f:60:f6:64:11:6f:3f:6c:98:8c:50:62:
28:cb:23:e0:de:cc:16:b0:cb:d4:ec:dc:82:a2:07:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:F8:D1:7F:DA:27:70:79:3C:1A:4C:20:99:FB:71:CB:B6:E9:43
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3a:3b:b3:6e:e0:45:88:06:c3:73:49:d0:4a:82:02:68:0a:
0f:8c:97:fc:0a:04:65:77:7c:03:3a:a5:08:af:50:f6:a7:20:
60:2e:b1:2f:a6:33:77:ad:52:0e:f1:13:cf:7c:90:d6:fb:5d:
d3:f1:71:ca:57:09:0d:23:6f:1d:d7:e8:d7:0a:70:8a:c8:11:
b1:e5:c8:ae:20:4b:3f:f3:58:04:c1:e4:96:4a:5b:7a:7e:6b:
cd:1f:7d:0c:d1:bf:46:d3:b0:2b:77:ca:f4:70:a5:eb:3b:46:
bb:5b:a9:5a:b1:e4:59:af:c4:6d:97:67:5d:01:44:ae:72:ae:
03:34:64:64:90:05:9f:6e:5b:10:5e:57:b6:cd:16:1e:1b:3d:
d4:1a:bf:c5:24:e4:cb:e9:0e:a4:26:9f:e2:31:43:f0:99:7c:
7c:83:03:02:0c:ae:ed:76:42:2e:9e:35:f6:f0:60:80:0c:db:
a1:41:af:07:95:29:5f:a7:f8:2c:fd:25:3b:24:7a:30:c1:01:
d9:a4:20:02:22:4a:38:80:50:31:c5:91:1a:3e:88:92:1a:88:
b8:57:5f:cf:08:fa:7e:a9:ed:2a:98:57:36:27:0b:f9:60:1e:
12:26:ae:8c:af:63:58:fc:14:6a:c3:01:5d:33:06:d9:db:6c:
41:b8:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:32 2025 by rpki-client