Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: YLr5mrUYVHs5O6upvqJD6VTN0c891ZLVavZNLFM4KFI=
Subject key identifier: 55:C6:05:67:C0:A3:7E:94:5A:4F:CF:4F:EA:59:FC:49:3B:C6:04:1F
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 01987B9C87C05CE4370958157B29E1F22EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0E86
Signing time: Tue 05 Aug 2025 19:01:52 +0000
Manifest this update: Tue 05 Aug 2025 19:01:52 +0000
Manifest next update: Wed 06 Aug 2025 19:01:52 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: hyOIq+3CAVv0dI4c4kcRgGsFZMRhF03XwKyEYN9/uvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:87:c0:5c:e4:37:09:58:15:7b:29:e1:f2:2e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Aug 5 19:01:52 2025 GMT
Not After : Aug 6 19:01:52 2025 GMT
Subject: CN=55c60567c0a37e945a4fcf4fea59fc493bc6041f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:60:0e:e5:2d:cc:7d:05:74:4f:75:b3:47:
ed:14:ca:11:89:98:10:64:2f:35:36:85:39:82:c9:
fe:53:9b:e1:a8:3d:90:13:86:f6:84:36:d7:d6:ec:
cd:bb:f4:7e:fc:d9:ac:17:ff:9f:c6:b0:b2:25:2f:
fd:da:4c:c2:5f:18:d9:23:01:71:69:32:58:1c:2f:
f3:ab:80:0b:53:71:ea:73:23:32:d8:55:22:06:f1:
bb:c3:f3:78:e0:92:3e:02:0d:15:6b:d6:b5:d7:e8:
f6:98:e6:89:98:9e:52:9b:9f:62:90:79:ff:ae:4c:
6a:e3:ef:98:e3:09:1d:e3:7b:da:7a:80:84:1b:26:
d2:3a:fe:9f:dc:8d:a1:35:4c:a9:80:1f:e1:b7:07:
10:ed:fc:6b:7c:2e:ee:87:27:a9:d0:00:c5:9b:c3:
1c:14:69:89:1c:54:02:8b:ca:18:e6:09:65:50:70:
44:7c:33:7f:fe:f1:32:30:16:15:9b:e7:9b:36:ec:
a2:cc:00:6d:da:5a:0f:16:3c:91:33:01:04:4c:dd:
b4:ac:dc:e6:31:4d:9e:d1:39:13:97:a1:1c:77:6b:
ac:6d:41:38:81:48:2e:00:70:85:4d:b4:7d:48:6f:
3d:b5:c3:fa:84:14:41:4b:bf:5f:57:eb:8a:c0:91:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:05:67:C0:A3:7E:94:5A:4F:CF:4F:EA:59:FC:49:3B:C6:04:1F
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:58:06:28:a7:81:c0:39:80:cb:54:1f:cd:f7:bf:78:95:
c1:83:3a:89:5e:98:c3:f1:3c:19:03:e6:fe:e6:d9:d0:75:a3:
6a:60:b3:78:97:51:03:8e:1a:11:6e:a4:b0:db:5f:07:02:a1:
68:53:3f:6c:a7:03:53:4c:b1:31:ad:9c:5a:fe:3b:cf:b5:80:
fe:6c:4a:cd:10:05:eb:04:c4:1a:85:08:0c:6d:77:79:88:41:
27:63:40:02:ba:c9:9c:03:44:6a:5a:a4:d3:fe:a9:6b:8c:b7:
0d:e0:33:36:ab:f3:3d:3a:a5:5d:aa:c2:ea:d7:53:ee:e0:43:
dc:2b:69:93:e5:bf:2f:10:22:bb:60:9d:6f:ba:4c:b9:95:9d:
48:3e:d1:db:1b:80:61:90:f3:dd:bf:71:11:3a:fc:ae:c2:f2:
bd:53:37:8a:5d:a4:f1:b9:8b:08:2f:fe:bb:eb:9f:0d:08:ac:
9c:42:5c:2c:33:55:41:56:0d:ae:0e:86:a0:b4:8a:d8:bf:7c:
4a:ba:7f:6a:4b:85:3c:76:57:4f:60:bb:45:7f:78:26:73:68:
60:81:e1:f3:66:96:47:9a:a3:5c:1f:95:3f:e4:2b:39:94:c8:
56:98:31:6a:a2:05:eb:1b:1a:a4:e4:04:44:f3:9a:f6:7a:5b:
7e:33:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:47 2025 by rpki-client