Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: NlkLeROFP2LVBnYZDY5X3AWrIOc8r7StUb6kMBrmJKc=
Subject key identifier: 64:65:19:4D:24:A4:B3:55:9A:A0:AE:BA:20:86:31:F5:CC:A1:76:97
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01987306B13B79720ECFAD0253D2E8A498F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 06B9
Signing time: Mon 04 Aug 2025 03:01:15 +0000
Manifest this update: Mon 04 Aug 2025 03:01:15 +0000
Manifest next update: Tue 05 Aug 2025 03:01:15 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: pN1GgP5xsB7FUiq9lcpgfGMPzIdIp3Nddq2kUSdE1W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:b1:3b:79:72:0e:cf:ad:02:53:d2:e8:a4:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Aug 4 03:01:15 2025 GMT
Not After : Aug 5 03:01:15 2025 GMT
Subject: CN=6465194d24a4b3559aa0aeba208631f5cca17697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:05:a9:a3:1b:a4:11:b1:d2:ba:38:2e:ce:
75:21:1e:07:83:97:3b:a9:2e:7d:c2:42:5f:55:36:
00:72:3f:a6:51:51:84:bc:59:ea:da:59:28:35:17:
41:92:ec:4c:96:b1:95:5f:70:25:56:56:4e:82:fc:
50:5f:53:7b:76:f2:37:72:e2:0f:67:d8:3d:6d:b7:
b8:00:e2:19:52:76:ec:b5:a5:25:c3:56:74:53:51:
37:38:01:2a:42:49:b7:c0:b6:68:36:5e:85:a8:9d:
84:fd:e9:50:fd:d0:13:e4:c1:4d:23:c8:ba:11:30:
21:7a:8b:be:08:d6:1c:ca:67:80:05:89:7b:32:03:
cd:21:60:a4:b5:dc:b4:80:35:79:d0:db:98:66:49:
2f:fa:ad:35:07:da:a4:a6:2c:92:91:09:bb:b4:1e:
a4:53:f3:30:12:7d:c7:76:c2:8d:16:62:d2:d3:97:
50:9c:7e:a0:8a:07:7c:ca:69:2d:39:45:25:e4:38:
89:7d:39:a3:41:e5:c1:1c:0f:1f:40:1e:c8:ab:d7:
18:ec:19:48:be:d0:57:4b:72:de:f4:ae:c7:44:d1:
2d:59:e9:92:15:e8:5b:df:33:95:90:5c:67:ef:91:
14:37:ab:e9:79:64:7c:60:bc:c7:31:49:6e:58:45:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:19:4D:24:A4:B3:55:9A:A0:AE:BA:20:86:31:F5:CC:A1:76:97
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0d:40:3d:a8:fc:f8:3a:51:6a:4f:cf:5b:12:a2:dc:10:de:
d7:9f:24:cf:3a:23:57:ec:cf:d3:12:93:21:be:c5:03:f0:51:
83:2b:2c:89:85:5d:4f:4f:06:c1:27:ea:d8:44:d6:87:c1:e0:
c6:70:7b:71:6b:5f:57:6b:fe:51:ac:56:00:5d:39:41:cc:e5:
3d:e9:0a:72:c3:20:1a:5b:46:bc:c7:00:72:90:4f:9a:e1:eb:
c4:6d:8a:20:b7:21:8e:05:e7:70:82:38:cc:1b:b0:62:b1:1f:
58:29:e7:5b:46:67:38:7e:08:70:ed:32:a0:a2:b2:eb:97:11:
98:e9:ac:77:06:38:d7:0f:c4:75:b6:8f:9a:9d:bc:6a:30:4b:
49:44:ce:32:e1:0e:0f:03:d4:c3:9f:25:f3:5e:f5:0f:b4:80:
46:c3:2e:8c:fb:1b:93:e2:5c:05:92:7b:75:be:10:6d:94:8e:
28:23:98:8b:17:f3:8b:d0:a3:78:ad:4a:59:7b:c4:3a:86:93:
68:4f:dc:1f:32:3c:3b:eb:1a:84:e2:56:1d:59:d7:7c:46:c9:
7f:3a:69:b6:71:50:e9:51:d9:77:ae:85:25:fd:ce:e3:3e:c3:
0b:e8:c6:b7:ce:d4:e9:8d:83:f3:81:50:fc:15:76:1c:56:9b:
8f:9a:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:01 2025 by rpki-client