Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: Zygj4WQCuro2Wj/utYFNwyhjkwARqsYFkF0ijfPPnJs=
Subject key identifier: 47:5F:C5:36:1E:2F:59:80:DC:54:10:1A:F9:84:2C:8D:1F:05:FA:28
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019875D15DF8615048A94544EAE732CC29A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 16:01:51 +0000
Manifest this update: Mon 04 Aug 2025 16:01:51 +0000
Manifest next update: Tue 05 Aug 2025 16:01:51 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: Q0GFG/mlvYVHDpXFWVLl3/H3OU5XZoI2g7KFqrgHjvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:5d:f8:61:50:48:a9:45:44:ea:e7:32:cc:29:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Aug 4 16:01:51 2025 GMT
Not After : Aug 5 16:01:51 2025 GMT
Subject: CN=475fc5361e2f5980dc54101af9842c8d1f05fa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:50:79:90:8e:0c:04:40:dc:c3:20:30:be:
62:25:19:10:4b:f0:a0:d0:7c:8b:f9:7b:b8:ab:c7:
eb:cf:26:f4:fe:a8:af:d3:18:41:55:ca:e4:04:2f:
fe:e1:dc:9a:68:7e:4e:24:67:1c:21:f4:b1:96:83:
e2:ab:4e:e6:a8:a6:9e:23:cf:1b:06:24:81:88:54:
e2:df:a8:93:f6:c3:63:f5:81:34:54:c5:e2:32:73:
90:9b:38:a8:16:75:6a:2b:d2:f1:00:42:2f:6f:0d:
58:c3:95:f8:b7:ad:51:7a:a2:21:ec:82:4c:21:d4:
bb:b6:63:53:61:64:4f:96:0e:3e:01:79:4a:5f:81:
6b:8b:ce:59:7b:5a:23:a3:ab:d3:92:f8:d1:79:c9:
19:b6:0c:b9:09:00:ec:0f:ef:da:ff:c6:c4:c1:d2:
69:c4:64:05:eb:46:fd:93:bc:c9:1c:37:fb:00:3f:
bd:93:2e:ba:29:ec:8b:a9:b7:b8:af:aa:7d:7c:f5:
72:0e:79:b3:d9:e2:7d:85:42:e7:65:ea:a1:04:49:
12:af:ba:e5:34:64:a9:0b:3b:77:6d:9f:5b:a8:17:
05:c9:14:9e:6c:b4:3a:53:a2:66:72:6c:e1:c7:c7:
64:58:de:fa:61:0c:30:4a:99:97:a0:46:60:b4:e0:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:C5:36:1E:2F:59:80:DC:54:10:1A:F9:84:2C:8D:1F:05:FA:28
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:a0:4c:02:29:b5:0f:57:6a:7b:25:da:13:c0:f1:d1:86:
6d:6d:5e:0c:03:a9:5f:bc:a3:96:a4:fb:5d:72:41:12:79:54:
46:c1:20:52:7e:d7:a4:aa:21:0d:56:11:b1:45:84:aa:71:c4:
7e:3c:a7:b0:b9:af:2d:9f:53:14:77:c2:d1:79:2a:c0:3b:8b:
52:87:a2:67:d5:46:4b:24:7f:eb:1f:e3:86:4c:49:7c:75:21:
7d:a3:b5:7e:4c:e0:0c:c1:23:e9:e5:28:3b:cf:01:87:74:28:
cf:4e:89:c6:23:71:61:2b:7c:ad:3c:0c:2b:dc:b2:3b:e5:83:
e9:f9:00:13:5a:e6:5c:5f:7e:a4:fe:98:cc:1c:88:4a:d2:47:
f6:d7:5b:19:a3:8d:58:40:db:70:3d:fe:d1:de:90:92:14:5d:
54:53:a6:8a:9c:84:6c:3b:ea:9c:4e:4a:82:70:51:ed:d1:aa:
8c:0a:d4:fd:f0:43:d8:dd:b8:40:1d:a5:7f:32:64:dc:a2:a6:
e1:19:fc:d4:7a:36:a1:d0:08:cd:f2:d4:ed:7d:71:b2:cb:14:
c0:11:41:6b:e3:2b:22:63:5b:73:c5:c9:21:86:65:42:96:51:
7b:a2:7f:b2:47:1a:1e:37:9d:06:a8:5e:c8:81:ec:cd:41:1f:
f2:5c:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:18 2025 by rpki-client