Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: /cQyWsHWBpHY+KUnj2k/SDhi+M6dFw+FUz1Ue5dFMyk=
Subject key identifier: EB:B0:D0:FF:15:D9:D0:62:AC:D6:2F:AF:2A:AF:A1:6C:80:95:E8:E2
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019879E3E28930F3483ACFF3DC67BB6FF294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 162D
Signing time: Tue 05 Aug 2025 11:00:34 +0000
Manifest this update: Tue 05 Aug 2025 11:00:34 +0000
Manifest next update: Wed 06 Aug 2025 11:00:34 +0000
Files and hashes: 1: 4SxEa8qHfL0SdS-yvynVjEWywI0.roa (hash: ed273NQ5dggxiwmHaUzsS7LYiMx/0KEG21fx026Qijc=)
2: 57zAUxjN80d98_hrUg6wNGuh-LQ.roa (hash: qIcET8+9I+XlvyugPkuqmk4yArAibC2n8LmahOzKwL0=)
3: D8TVIpbhKokDS9trBBqJHsFT1UQ.roa (hash: buVD8eTr7vS6C640rVcFTDAjpCVFYAxsjVTpolrqfNA=)
4: V-G5n9JBF2fuQBXkHR943IM1SJk.roa (hash: PktwOhATCRnu/fMCAW8Roob3cNUQ8DCkE9sG1tOGfQ0=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: IIKtjUJrKGVI+f1W7OHvbMnNgPKho8uzfAlczaIvva8=)
6: rnTaQ1uEKUsJsa3f9-uniTuwHWo.roa (hash: 65NB0UfxYYmSvSLb5gS9zELjlvrzXWC3McdcTIR7Hxk=)
7: tIc5dJ9row9Jpwnimlce4tYbp44.roa (hash: ouwAo45RW/R/dO1EFuBCaboweb6Z3RjFTDf5e9DgnQU=)
8: xv_S9Q_lixnhLdeB2FeY6-83q40.roa (hash: fpHqpuP8WhUb/qgqx71BT4D9l/LEKw+tKbvv5QvJ1WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e3:e2:89:30:f3:48:3a:cf:f3:dc:67:bb:6f:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Aug 5 11:00:34 2025 GMT
Not After : Aug 6 11:00:34 2025 GMT
Subject: CN=ebb0d0ff15d9d062acd62faf2aafa16c8095e8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:c8:56:e3:df:39:29:6a:db:79:a2:bc:7d:
e4:e1:3d:78:b8:46:49:2a:2c:da:38:0f:ce:93:2f:
cb:aa:66:98:04:b8:73:06:c9:f1:8b:2f:97:10:6c:
a1:a6:68:94:81:0a:39:34:bc:5a:2e:27:bf:30:39:
c3:2b:81:54:b9:ec:df:29:0e:7f:49:dd:d7:86:33:
af:eb:bc:38:74:84:88:d7:9d:31:44:13:c8:2f:83:
a5:91:5a:1e:97:9b:65:02:c3:2f:1f:76:67:f0:64:
4e:23:04:5c:18:55:70:33:b8:2b:52:cb:79:32:6a:
8b:b9:4a:27:b5:51:20:4e:bb:c7:af:5a:4a:f3:ad:
b8:21:78:b4:ee:90:82:63:12:08:bc:af:a8:42:93:
fa:3d:ff:66:92:11:5f:17:a7:21:19:97:7a:22:b0:
5a:3f:1b:a5:f7:1a:11:32:86:9c:af:da:58:42:b6:
21:38:63:71:72:9a:9a:19:ff:72:16:cb:8f:e2:de:
f1:2e:d6:2a:99:64:80:a5:f8:ce:6b:d5:fe:e2:34:
8a:22:34:07:de:4b:91:74:a7:8f:a7:aa:4b:13:ae:
d1:4b:ec:15:f1:43:c7:8f:52:2c:b0:7b:62:29:f9:
29:3d:15:a7:c0:20:06:1a:6d:cf:7a:de:a2:d8:c1:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:D0:FF:15:D9:D0:62:AC:D6:2F:AF:2A:AF:A1:6C:80:95:E8:E2
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:44:fc:b1:7e:d2:59:ad:44:d6:06:13:3b:43:52:e8:13:81:
80:b5:5c:7e:41:44:ed:14:e5:81:0a:06:39:d3:b5:ed:f2:a2:
24:04:97:12:88:75:0a:42:3b:1c:7a:3c:4c:36:fb:44:1f:10:
b6:10:6c:55:5e:b7:e9:da:74:7f:f5:9e:40:29:4c:9b:6c:59:
e9:29:00:4e:93:49:f0:5e:de:da:25:18:98:87:a8:22:00:9b:
49:fc:b5:4f:0c:9f:06:c0:84:45:34:46:bd:66:ef:76:3e:b4:
7c:25:8b:6e:9d:2c:9d:1f:08:9f:41:f9:db:53:0d:33:3c:56:
b6:52:fb:5b:d7:a3:d5:84:67:0b:70:52:ca:bc:df:a4:74:cf:
ab:d2:0b:f0:94:f8:01:6f:c9:8c:1b:c0:06:3f:e0:33:c6:c0:
48:73:31:5f:11:1a:ef:46:2a:b4:02:8c:cd:ec:3e:8a:3e:71:
a4:4a:7f:2f:32:7f:a3:3e:d1:23:74:a5:35:3a:52:60:a0:c1:
8e:45:ad:ed:9d:b6:37:64:ce:c9:53:56:ca:ee:bd:70:93:3a:
b3:52:ec:3d:be:a9:0f:9b:24:e5:dd:fe:df:12:7b:ed:bb:0d:
34:67:a5:2c:c4:8b:53:c4:93:38:db:d0:b7:ae:07:38:a2:00:
6d:c2:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:37 2025 by rpki-client