Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: FwSwczAsDFGLJ18pNLRjb+Jmv2KRVBThy0Ep856ejwU=
Subject key identifier: E5:00:61:79:8E:DB:73:17:33:FC:C0:9E:17:53:B1:79:6D:8A:2C:81
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0198A15FFB424DF92AB3649E62E8298C46F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 0619
Signing time: Wed 13 Aug 2025 03:01:18 +0000
Manifest this update: Wed 13 Aug 2025 03:01:18 +0000
Manifest next update: Thu 14 Aug 2025 03:01:18 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: A/dqjgeTf0gWQp5GdYDWXOTLXMkqyFVxqI+a7lQye6A=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:fb:42:4d:f9:2a:b3:64:9e:62:e8:29:8c:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Aug 13 03:01:18 2025 GMT
Not After : Aug 14 03:01:18 2025 GMT
Subject: CN=e50061798edb731733fcc09e1753b1796d8a2c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:38:6f:97:7f:14:1b:20:0c:14:39:f3:70:
0b:83:e8:ee:a0:04:b7:b5:82:f9:2e:d6:3e:d8:ed:
c4:4e:93:06:64:69:e5:94:a3:76:0e:9f:1f:02:6e:
c1:0e:1c:25:c9:cb:1f:57:7f:59:25:6f:ef:1d:fa:
fc:f0:32:65:7f:f2:74:f0:97:77:81:49:91:7e:74:
9f:a8:16:5e:3e:c4:fc:1f:5a:c7:49:90:1d:72:90:
e4:20:b0:15:8c:1c:8a:ab:72:d0:e3:d4:4b:77:fd:
b4:4d:7d:9b:24:30:a4:5c:df:1c:43:ad:01:15:03:
d2:8a:3c:ff:5d:b5:82:fd:3c:23:5c:2f:64:30:64:
68:5d:b4:12:f7:9c:c9:92:bc:e9:3b:0a:9d:b9:4a:
8e:6c:75:56:c2:ed:23:6e:20:d0:ad:45:22:59:6d:
87:14:29:19:5a:60:8d:5a:9a:7c:67:f9:9e:75:40:
05:81:a6:e7:b8:c0:e2:a9:a2:83:fb:02:31:aa:da:
e3:cb:8c:5f:3c:99:e5:cd:5a:ea:0a:3e:c3:64:3f:
dd:8d:81:d3:ba:99:3b:44:65:50:14:37:31:b3:3e:
0d:7c:4d:5c:0d:72:b0:fe:50:fa:a7:54:f5:9e:c7:
8d:bd:e0:b7:c3:95:c2:0b:e1:cc:7b:a3:4c:c4:0d:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:61:79:8E:DB:73:17:33:FC:C0:9E:17:53:B1:79:6D:8A:2C:81
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f5:d6:a8:0e:c0:7a:26:1b:e4:94:fd:a7:a7:b3:27:f0:7b:
2b:50:89:56:ed:1a:fd:be:d9:1e:db:82:d5:80:04:9c:b3:8e:
1a:2f:5b:37:53:e2:2e:db:1c:e8:ff:16:3a:a4:fd:41:1b:75:
46:61:b9:33:e0:e8:c3:43:df:98:60:9e:dd:8e:a5:f8:58:9c:
7e:3d:6f:73:71:ce:95:2e:12:08:13:f6:7c:c0:2d:d2:f1:96:
cc:4a:72:64:e5:17:8f:d5:54:84:c9:46:e4:21:7a:25:6c:ce:
a2:8a:f3:48:82:57:bd:bf:e2:9b:9b:e9:86:18:f1:81:59:84:
15:e4:b8:e4:32:ae:ea:94:b9:77:82:31:37:73:73:22:cf:d5:
df:8d:78:4a:04:3f:6c:5a:1d:57:11:91:5b:8c:4e:58:8d:13:
48:db:f5:07:92:91:69:0a:6d:f5:13:64:6d:2c:31:c8:be:bf:
f8:6f:d7:6d:8d:c0:b8:97:8d:25:06:87:f4:41:ec:92:6e:c6:
5f:bd:80:22:e6:6d:67:4f:35:85:bb:2f:5a:80:13:cd:1d:85:
fe:fa:7c:5f:33:b4:89:6c:b7:ac:e1:d0:e4:0b:ad:7b:ed:c7:
88:a0:4d:9b:60:2e:35:88:d9:7d:92:50:4c:64:a8:da:3f:5c:
a8:ff:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:35:39 2025 by rpki-client