Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: 5jddBULtnO7McsuSCfqYKBcEz8cfzOLHxoOgxujWti0=
Subject key identifier: 94:90:BA:D2:2F:0B:31:62:25:8F:C8:38:B8:C9:95:48:78:8D:18:C3
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01988C58A0BC188ED9D649D108B160D0A48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 01:01:15 +0000
Manifest this update: Sat 09 Aug 2025 01:01:15 +0000
Manifest next update: Sun 10 Aug 2025 01:01:15 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: yomUCEMSRvRTgQENKHhb273H1IL2ZMNAJNjOZ1ykxMw=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:a0:bc:18:8e:d9:d6:49:d1:08:b1:60:d0:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Aug 9 01:01:15 2025 GMT
Not After : Aug 10 01:01:15 2025 GMT
Subject: CN=9490bad22f0b3162258fc838b8c99548788d18c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:ca:0c:cd:86:9b:5d:55:e4:cc:2c:21:57:
c5:5d:26:f3:8a:54:d4:6f:2d:bd:1a:52:2f:94:16:
54:6c:27:ed:15:8a:ab:94:a0:32:8d:c1:1e:02:90:
f9:63:f6:f5:85:1c:88:35:b4:0a:f4:4c:70:e9:f4:
f5:13:1b:e7:e9:fd:59:53:99:08:e6:f3:e6:35:ef:
c8:ee:76:92:39:1b:48:dd:b1:d0:03:b5:50:3a:5f:
3e:33:09:d1:e9:59:f2:ef:69:24:2e:66:a5:c2:51:
65:7e:1d:8b:2d:9d:62:ff:61:36:1a:5c:1b:4e:b4:
27:fe:21:89:fc:d0:5d:91:39:2a:d4:b3:3a:8c:b5:
ad:6a:16:8b:51:87:5b:cd:30:b9:bc:e8:18:b2:d4:
6d:96:c8:38:97:f8:2d:d3:ea:e8:94:2b:ba:41:ae:
e3:00:70:f1:af:22:f9:e9:a9:bd:c6:9a:65:9b:7d:
18:35:19:f1:78:c1:ed:e0:23:96:ed:18:99:5b:83:
64:65:2d:93:3f:0b:59:45:45:2f:90:d7:52:70:c4:
7d:a4:3e:da:4f:ea:d7:31:2d:13:de:e4:91:be:f8:
8f:6c:74:e4:dc:45:53:29:4f:1f:fe:50:6a:67:c1:
9d:7d:a6:39:7b:c4:05:ba:b2:a4:18:1c:9e:9a:4f:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:BA:D2:2F:0B:31:62:25:8F:C8:38:B8:C9:95:48:78:8D:18:C3
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e4:20:f4:0e:92:af:a5:41:c7:28:cc:97:c7:73:0c:d3:fe:
3b:0f:45:00:85:3d:e6:ec:8b:fd:ac:76:42:5c:58:5d:5c:b6:
3e:5e:73:3f:81:ea:db:88:2c:4d:49:16:d5:2e:5c:be:b8:e3:
b3:41:c6:3a:e5:91:cb:4e:e1:ea:ba:fa:d8:47:d5:49:a5:04:
ab:b3:e6:23:02:f3:ce:28:c5:58:d3:19:b1:8f:79:08:5a:d1:
4b:c6:d2:f4:7b:30:86:81:42:b6:64:c2:55:b7:2f:61:1e:ff:
42:76:53:c4:cb:62:48:69:69:25:a7:ca:7b:b0:eb:8a:78:dd:
27:95:0a:04:5a:11:ab:57:75:ff:8f:90:36:fc:c3:b1:7c:06:
7c:47:24:9b:3f:50:d1:51:01:e8:8d:1a:29:db:43:14:ec:bc:
d6:ff:86:09:38:e9:4a:7c:c3:36:d3:c6:03:f7:df:3c:79:2a:
0a:a5:47:14:48:54:e4:8e:18:81:9b:ec:57:bf:c1:6b:e1:65:
9b:d5:17:0c:79:57:3c:4c:ba:9a:da:ec:36:01:9b:69:13:08:
e9:39:be:a2:0a:7e:b3:7a:3f:f6:e7:d4:52:22:bd:73:d1:01:
86:bd:48:0e:62:7f:7a:fa:cc:ff:d2:7d:85:2c:76:43:0e:59:
e7:e3:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:52 2025 by rpki-client