
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: KBXDuHxbkARfs0OOS3jzuX32Yij20Tpo6UyFhWnIfHI=
Subject key identifier: 97:9C:21:D0:1B:8A:04:32:B1:44:19:18:26:74:1A:21:37:7C:85:2B
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0198A128ECCDCDDDA2DF6569D38C86EA1375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0D8E
Signing time: Wed 13 Aug 2025 02:01:10 +0000
Manifest this update: Wed 13 Aug 2025 02:01:10 +0000
Manifest next update: Thu 14 Aug 2025 02:01:10 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: h3Iu36hfaz6FR/Z4vkzkYuK+dPkvpqywkfZ7unWFLjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:ec:cd:cd:dd:a2:df:65:69:d3:8c:86:ea:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Aug 13 02:01:10 2025 GMT
Not After : Aug 14 02:01:10 2025 GMT
Subject: CN=979c21d01b8a0432b144191826741a21377c852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:f7:1a:34:dc:5d:e9:1e:80:ca:98:5a:88:
c8:55:98:9a:5d:09:e5:83:08:e7:2e:6f:e9:58:dc:
a7:48:32:a2:67:60:1d:b8:91:0a:c0:28:c9:2b:a6:
ac:43:50:71:35:4b:d8:e0:b9:05:38:d9:da:18:2c:
3d:1e:24:18:ef:20:81:03:d9:a1:29:8d:8b:18:08:
a8:32:13:7d:42:3d:29:e8:c9:67:b9:db:91:73:0b:
fb:fd:21:11:d7:0f:b1:d3:bd:e3:7e:04:c1:85:71:
c2:fe:4b:d9:25:eb:66:bd:dd:a9:a2:16:e7:66:de:
df:81:2d:cf:2a:98:61:8f:1f:74:f5:96:8b:74:64:
2b:c9:b7:84:30:c3:c6:fe:3a:25:fe:e0:ad:a7:00:
b3:d0:29:6d:73:5f:2c:bc:be:d6:b2:36:bc:ed:a4:
3b:3f:dc:d4:23:d8:51:a6:f0:d7:c4:94:df:f2:42:
05:de:67:ec:2c:bb:7d:13:8e:b5:1e:d9:42:b2:6e:
9b:f8:4f:75:e2:a0:d0:28:5b:91:2d:56:2e:b8:94:
31:0c:29:65:5b:89:53:6b:23:5a:96:5e:d9:15:30:
00:b5:b5:40:eb:11:3a:f8:3f:58:da:4f:34:50:ba:
f8:84:ae:df:7e:5c:24:8b:21:f3:77:98:af:d9:f8:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:21:D0:1B:8A:04:32:B1:44:19:18:26:74:1A:21:37:7C:85:2B
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:8a:93:9d:9b:39:80:7a:80:df:5c:b2:7f:7f:2f:e3:75:14:
1f:20:63:37:77:5b:09:19:c6:63:5e:c5:cf:db:74:b6:ea:8e:
92:15:11:cc:94:f4:c0:12:e2:98:b7:22:1e:cb:b7:6e:45:be:
11:9c:dd:d1:3c:42:df:1d:33:a9:67:39:94:c0:72:02:d0:df:
cd:35:b9:37:68:99:89:f5:f8:25:46:ee:b2:7d:f9:0c:ec:f5:
7e:f6:b4:3b:4b:1d:16:3f:46:a6:1a:7b:6c:c8:95:d3:10:4f:
9b:3e:94:fa:91:9f:f6:d3:b9:4d:b6:be:90:07:26:0d:35:08:
1d:48:35:40:7c:3a:83:0c:90:f2:2f:db:74:0c:3d:ef:21:c3:
87:e0:8e:3d:b5:75:13:97:01:7e:85:31:0a:72:b0:d9:4d:bf:
bc:32:e3:a3:1a:93:92:f8:b4:18:dd:9c:b1:38:9b:6b:80:b8:
32:78:4c:91:f4:16:99:06:05:34:b1:26:8c:cb:25:45:39:e1:
a9:11:c0:51:cb:15:83:71:c7:ce:a6:28:e1:a3:67:66:fe:45:
a5:00:cb:a2:ef:bf:27:34:15:48:7b:d2:0a:8c:a8:60:7f:22:
af:ed:de:7e:95:a1:22:b0:fc:d9:af:57:20:a6:1e:83:5a:c1:
7c:c5:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:39 2025 by rpki-client