Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: jetXGnzqVyPTIZDpk02pvRi4uNuLRZRnL458RCzGpp8=
Subject key identifier: D1:21:2E:F1:A2:A8:43:C3:2C:BF:35:81:1D:A6:60:7C:6B:D0:AB:04
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019874F49B5701BC0959ABEA57E33ACB1F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 12:00:44 +0000
Manifest this update: Mon 04 Aug 2025 12:00:44 +0000
Manifest next update: Tue 05 Aug 2025 12:00:44 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: C7hXcMmHDsHTxlcLP2wVqEPDlUnrNtPT6iV8xvULQpg=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:9b:57:01:bc:09:59:ab:ea:57:e3:3a:cb:1f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Aug 4 12:00:44 2025 GMT
Not After : Aug 5 12:00:44 2025 GMT
Subject: CN=d1212ef1a2a843c32cbf35811da6607c6bd0ab04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:b5:9c:6b:01:81:78:1d:d5:ff:8e:38:e2:
f8:ce:00:37:86:2b:48:0d:7d:a1:be:0e:d4:5e:a1:
c7:b4:97:be:70:7e:19:69:6b:3a:b5:b9:8f:e7:4e:
e0:fb:b0:61:21:e2:10:ca:d2:08:3b:76:d3:3c:66:
2c:e2:f2:42:57:e9:aa:89:e8:44:9b:a4:6e:5b:9a:
c4:b3:59:f0:49:95:dd:84:2b:94:77:db:ca:f2:74:
7f:18:ef:30:d3:35:33:af:35:57:90:c8:c6:ad:a9:
41:82:8b:99:18:cd:19:c6:65:4c:99:a6:0e:e4:72:
68:75:62:d4:07:0d:e8:b8:ac:bd:11:9e:7c:9b:97:
a6:94:bf:de:0b:9a:e6:4d:cb:ba:5c:56:0d:d5:ab:
7a:c9:a3:d8:cc:dc:df:16:b4:f4:23:e7:3b:c7:04:
14:21:84:85:2f:05:1a:4c:d7:d5:5e:0b:40:97:ab:
99:c0:1d:8a:0a:92:ea:1d:29:21:3c:be:95:2c:52:
e3:11:f6:da:71:40:72:d3:ff:b8:1e:80:c8:81:ea:
a2:d0:67:f8:d0:08:45:d8:eb:02:99:11:ef:2d:94:
48:6a:38:7f:46:c5:eb:af:8f:d7:84:21:c3:f3:7d:
9d:7c:33:d5:de:04:0b:ec:25:c2:33:df:46:24:23:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:2E:F1:A2:A8:43:C3:2C:BF:35:81:1D:A6:60:7C:6B:D0:AB:04
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:16:5f:66:59:85:c2:0e:51:79:ef:20:a7:c4:55:70:a9:75:
51:9a:35:c3:9a:0d:87:f5:34:50:a9:d3:4f:ec:83:fb:49:19:
1c:13:70:b0:b2:39:ea:ff:80:81:59:6c:95:15:64:78:f8:23:
67:23:46:5f:ed:66:3e:4d:78:8b:bc:94:36:c3:df:85:f7:7c:
b0:21:26:6d:4b:7f:e6:f0:b6:d8:c7:97:7a:87:31:65:cb:fa:
00:78:e9:fd:44:09:11:75:30:9a:06:b4:d3:f4:b5:38:ca:65:
88:b4:a7:e0:7c:da:52:64:c3:47:a3:ca:fd:d3:c2:f4:25:34:
bf:d3:4c:d7:56:2f:e7:53:db:17:d4:8c:f4:43:4b:d6:ca:1a:
17:c1:88:5c:7c:60:4b:44:5d:c6:99:e6:a2:e5:30:9c:67:6b:
64:d9:b4:77:66:f6:8c:b3:57:15:a6:0e:83:a2:25:3e:37:2b:
c1:2f:5a:3d:57:ef:66:e0:c0:05:82:f9:85:db:bc:e0:7e:21:
43:e3:fe:71:fb:4b:08:bb:92:46:9e:89:b4:7b:24:56:d9:2e:
de:45:c4:de:0b:4d:2d:b7:14:7b:31:4d:9e:bc:da:90:cb:c2:
43:af:7c:a0:aa:d4:24:f8:03:6a:a7:7a:3e:2c:80:b1:28:49:
cb:15:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:06 2025 by rpki-client