Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: Ks8bdqqQXoWoVseGXowJG/PhvX7+KXLbjSCrCUbrbXo=
Subject key identifier: F3:3D:0A:34:75:0F:67:38:E2:22:16:EC:83:D3:FB:95:5B:9E:58:8A
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019889578884C30BECD1C3AF2BB51DCCF3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 0308
Signing time: Fri 08 Aug 2025 11:01:11 +0000
Manifest this update: Fri 08 Aug 2025 11:01:11 +0000
Manifest next update: Sat 09 Aug 2025 11:01:11 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: V76wDJYGWj9OWSDA+WZmo0DC0qNbCR0g7zi/BQD6OC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:88:84:c3:0b:ec:d1:c3:af:2b:b5:1d:cc:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Aug 8 11:01:11 2025 GMT
Not After : Aug 9 11:01:11 2025 GMT
Subject: CN=f33d0a34750f6738e22216ec83d3fb955b9e588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:a7:8e:78:08:85:ef:fc:c4:ce:e7:94:9a:
7a:75:a3:f2:c9:db:75:45:db:b0:ed:08:7c:cf:5c:
c7:4d:f3:4a:fe:bc:d2:c5:47:43:2c:33:9d:e7:f7:
19:39:b5:87:52:d9:0c:7f:19:4f:8b:a8:e7:1b:32:
fc:a8:2e:fa:a9:94:b0:17:6d:43:82:35:b5:56:00:
41:0e:97:03:0e:a9:01:34:4d:5e:2e:46:be:ce:92:
6c:3f:9e:f4:35:ae:6c:dc:91:1c:2e:ee:dc:af:5c:
e2:d0:df:85:af:5a:eb:23:d6:d7:f8:07:6c:2b:91:
ca:d1:cd:fd:1d:06:a3:44:14:1f:9e:21:e9:1a:4d:
df:49:73:e7:3d:fa:07:f5:2f:f0:7d:ad:8e:11:23:
3a:cc:ff:b0:0d:86:3d:15:f8:56:c6:f6:34:f5:71:
02:0d:87:1b:59:43:d3:21:1a:69:56:c7:8f:60:e1:
c7:d6:3f:26:d4:78:97:f5:f7:6e:c9:63:38:01:12:
d2:8c:ff:9e:08:cc:80:8b:99:2e:74:b3:4f:00:54:
46:8c:eb:37:44:43:bb:48:cd:e7:39:30:1c:54:75:
eb:86:71:ca:35:50:73:7f:8d:c3:a6:9d:07:d2:54:
90:f7:1c:ee:68:b2:21:9c:f4:e6:eb:30:9b:a5:b8:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:0A:34:75:0F:67:38:E2:22:16:EC:83:D3:FB:95:5B:9E:58:8A
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:de:dd:63:66:7c:4e:ca:bc:91:8c:1d:8b:bc:ed:4d:0b:85:
1b:dd:45:2b:b6:73:5a:a7:b6:ae:89:6f:db:86:cc:01:7b:32:
7c:42:0d:0d:41:1d:b0:60:6c:65:30:ae:74:da:61:b1:fd:6d:
83:1e:31:2a:9c:4d:63:e0:a2:84:29:c8:17:fa:92:f7:a4:9d:
e0:40:fc:e0:3c:3f:8b:18:c1:e2:11:8b:cc:d3:ba:43:56:2f:
09:c8:08:66:65:37:f7:62:6c:56:07:5a:fa:f5:35:c3:f4:1a:
61:b2:ad:79:80:88:d1:8e:cb:fe:bc:75:7d:cf:6c:fb:43:5a:
86:24:f3:c3:78:58:d7:af:06:e6:c7:5c:09:4b:b2:e8:11:3a:
34:6a:bd:e7:10:13:a3:b7:a0:b1:d1:4f:21:09:77:5e:70:fd:
cf:98:d9:b7:5f:1e:6e:a8:3e:cc:98:aa:73:ed:cb:61:c1:a7:
32:42:72:e3:0b:58:ba:3d:38:b9:8b:7d:13:f1:a0:1b:e9:cb:
0c:22:41:2e:95:04:3f:9f:c3:4b:e0:a8:fa:79:30:5c:28:34:
05:0d:d6:a1:20:0a:33:bf:c1:d1:22:a7:7f:da:b8:40:4a:47:
0d:9e:a7:91:2b:82:60:82:3c:f0:ef:5e:71:51:7f:31:8f:45:
d2:56:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:21 2025 by rpki-client