Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: MQ3Nwe4pbtWo2NIWA9/4XjcHn7tQpDF61pfeKnNpyFQ=
Subject key identifier: 2E:8A:79:C6:E9:FB:2F:A8:3F:29:5E:89:7A:5F:5E:CA:80:BC:63:6E
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 019889C557E49BFD579BFFF8B19A6D759720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 13:01:08 +0000
Manifest this update: Fri 08 Aug 2025 13:01:08 +0000
Manifest next update: Sat 09 Aug 2025 13:01:08 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: zupTucxQOkTH5F01eQbTLjpUT/DctEEYMK/rUOKMYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:57:e4:9b:fd:57:9b:ff:f8:b1:9a:6d:75:97:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Aug 8 13:01:08 2025 GMT
Not After : Aug 9 13:01:08 2025 GMT
Subject: CN=2e8a79c6e9fb2fa83f295e897a5f5eca80bc636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:41:95:38:a6:a8:0e:2c:8f:31:d1:ae:f7:
42:38:6d:9f:0a:16:d1:d6:43:57:b1:d6:90:32:b0:
80:aa:1f:10:f5:62:d8:48:b8:fd:58:f4:78:63:0d:
f6:17:34:e6:b1:59:01:a0:50:37:a6:b3:48:f6:88:
9c:dc:a4:58:60:d0:40:dc:78:af:63:19:73:db:b8:
6e:0c:74:ea:3a:46:31:57:ff:15:b9:8f:94:f8:38:
fc:81:7c:c6:d6:2d:33:59:20:8c:f5:08:62:ed:a5:
72:6d:58:6e:6b:d1:30:6a:80:3b:b3:1e:22:19:33:
ce:54:3f:33:e4:e5:20:fb:18:c9:ce:6d:a3:cd:38:
b1:6c:a4:39:da:d8:4c:20:4c:1f:af:aa:8c:18:a3:
c5:93:5d:90:9c:f2:9f:1c:a8:4d:e1:07:77:60:b2:
c0:e1:56:d0:99:d8:c9:20:2f:f3:1f:e2:f4:11:e5:
25:0b:6a:df:ae:8c:e3:72:2d:56:6c:8f:0a:7e:33:
21:e5:26:db:16:cc:0e:90:a8:4c:4d:45:e2:6c:27:
96:34:4f:20:d9:36:e9:c7:1e:d1:7a:88:bf:d8:4b:
df:ce:44:d6:5b:92:7c:16:f3:a9:a7:f8:7e:04:81:
1a:84:93:bd:f4:91:12:31:07:6e:4a:d6:1b:6e:71:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:79:C6:E9:FB:2F:A8:3F:29:5E:89:7A:5F:5E:CA:80:BC:63:6E
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:dd:21:d5:2e:82:ed:26:d7:a6:16:6a:40:29:cf:7b:a9:
07:a3:15:0a:5e:23:7d:15:2e:46:43:48:5d:01:e6:15:b5:7a:
f7:47:86:a5:eb:7e:57:c9:8b:93:07:a8:40:a8:fc:63:7b:ce:
79:51:b9:ae:e4:be:2d:73:b6:c0:b5:06:a9:22:2e:73:3b:6b:
b8:29:cb:24:6a:2f:38:12:45:9d:76:f9:fa:67:b4:a2:ce:f9:
21:d4:71:01:b8:53:bc:4c:27:41:90:d7:fc:f0:53:3e:8b:4e:
23:8a:86:5b:46:ca:82:3d:81:22:89:99:76:5e:02:40:f6:82:
fd:bf:9f:c4:10:f9:f2:8f:e8:18:c5:82:fb:87:10:a9:ed:e3:
8e:8c:d0:de:75:2b:a1:14:81:11:92:fe:7f:27:c1:79:ed:84:
11:49:1a:b5:60:aa:9e:04:40:0f:58:8b:32:d9:71:68:2b:07:
52:ff:0b:58:e5:48:e9:9f:f3:e1:5f:b4:7b:76:18:b5:7f:20:
3f:36:5a:6a:15:99:4c:4d:b1:d9:24:0b:8b:17:87:1c:0f:92:
a7:cd:26:59:5c:c1:a2:85:15:8b:57:fc:93:26:c8:55:f4:69:
6a:2d:9a:6b:ec:83:11:e1:d6:30:b9:9a:a8:16:30:44:30:a6:
b5:9b:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:00 2025 by rpki-client