Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: oDmrJbnd/ZACuVy8nt/3T2383LD7sRuJU9hEaXIkZu8=
Subject key identifier: CD:07:3A:C8:4D:16:AD:B5:83:4B:63:09:19:6E:70:C4:47:C0:15:D5
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 01988B0EFCA8326822BC5535C736B74F10DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:11 +0000
Manifest this update: Fri 08 Aug 2025 19:01:11 +0000
Manifest next update: Sat 09 Aug 2025 19:01:11 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: 05KaI6afMKvkLi5+KIcvSojmKhh1Ny6WlirRS+FUbvg=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:fc:a8:32:68:22:bc:55:35:c7:36:b7:4f:10:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Aug 8 19:01:11 2025 GMT
Not After : Aug 9 19:01:11 2025 GMT
Subject: CN=cd073ac84d16adb5834b6309196e70c447c015d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:67:01:a0:a3:bf:92:72:e1:6b:0f:8d:05:
63:ef:ba:f6:39:a3:20:1e:77:1d:1f:ed:71:dd:e5:
0c:17:71:03:04:e1:16:4a:69:c8:53:91:0a:43:b7:
df:72:5c:eb:05:f5:b8:59:70:38:96:d6:12:ad:d2:
45:b5:a2:5d:30:ac:50:e8:ab:fc:51:42:36:60:6e:
ae:97:21:b4:c5:ac:d5:50:0b:da:32:53:97:71:08:
6b:18:79:da:a6:9c:64:d3:96:f6:0a:10:58:a7:89:
0c:fb:0d:7c:39:46:c6:7e:e4:53:4e:46:b4:e6:c3:
da:ac:78:13:39:46:50:f1:57:9c:65:18:1f:e3:d2:
07:7e:73:34:e2:ea:74:e5:bf:d8:4d:24:5c:b0:0b:
79:63:2f:2e:41:8e:a5:29:94:24:ba:80:e1:35:22:
19:49:43:1e:6e:3b:df:df:ea:60:ee:7e:c4:79:4b:
dc:a9:90:40:8c:1a:dd:06:04:2c:77:64:df:e6:1b:
24:7b:49:0c:fb:19:0f:22:cf:e7:58:14:a2:2f:82:
47:2c:5c:d7:c0:6a:5f:cb:a7:42:f6:06:cd:14:c8:
80:cf:42:fb:ff:db:4e:e0:60:ed:4b:37:78:5e:ea:
5c:d4:70:30:ef:0a:7c:b3:ef:1c:1c:db:bf:04:e4:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:3A:C8:4D:16:AD:B5:83:4B:63:09:19:6E:70:C4:47:C0:15:D5
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:75:fd:31:84:b5:00:13:2d:78:8d:ad:15:ad:5e:70:b8:b1:
bd:67:0f:31:f7:d8:dc:98:74:90:a4:47:0d:67:8a:e7:32:4b:
80:a4:80:4a:c7:b0:3a:cf:ea:5d:2b:82:de:bf:82:c7:39:26:
0f:87:96:48:41:f0:80:1a:c2:fa:d6:22:f0:a5:48:9f:51:4a:
9b:43:63:9c:a7:31:69:5c:44:af:2f:af:91:82:33:d0:b7:b3:
1f:89:98:e4:8e:cb:30:84:0e:29:e9:9d:dc:9a:20:75:32:dc:
83:a0:74:c9:ba:b9:51:f1:06:b3:2f:7d:16:00:35:8a:1f:bb:
e9:b8:72:f1:56:78:b0:a2:07:66:3c:4c:1d:74:5c:63:2e:7f:
c2:0c:34:6b:7d:30:d6:c3:f6:f4:51:fb:b8:ca:e6:d4:f4:b6:
2d:a2:b0:6c:27:51:96:bd:b2:c6:44:f3:36:f3:29:e2:24:fd:
af:d7:0a:bd:e3:e2:01:90:b9:92:b0:19:f1:ff:86:5a:79:d7:
19:91:fb:5c:20:a2:60:8f:37:e2:75:78:5d:2d:eb:5e:a4:1f:
18:f7:3f:9e:0b:7b:f1:b0:50:4a:71:ec:42:cc:b3:78:3d:11:
f7:76:cb:95:10:1e:31:58:c4:30:76:22:58:27:87:4a:3f:d5:
7f:56:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:05 2025 by rpki-client