Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: yb5antLcwzB7hiF+397GtDjKezI+rO99d2dfpwZ9CT8=
Subject key identifier: 1F:E8:3A:50:B3:44:A6:38:77:3D:8A:8D:E5:69:D0:72:DB:2A:87:55
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019880F913F01A0A9CF62F2CB6B6E5C747CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 20:01:03 +0000
Manifest this update: Wed 06 Aug 2025 20:01:03 +0000
Manifest next update: Thu 07 Aug 2025 20:01:03 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: PnImNjcFVuIXXWTbwYdxsn+A9Fd4BtHyXLDuX5YeYhA=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:13:f0:1a:0a:9c:f6:2f:2c:b6:b6:e5:c7:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Aug 6 20:01:03 2025 GMT
Not After : Aug 7 20:01:03 2025 GMT
Subject: CN=1fe83a50b344a638773d8a8de569d072db2a8755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:cc:66:b2:83:0b:e0:f4:74:bc:3f:9f:a4:
db:fd:9c:f0:75:2e:5c:48:3a:7a:b6:a8:41:25:b0:
de:76:49:7c:c9:c9:d9:6d:f5:25:c8:d0:27:96:8b:
d0:7e:5c:0d:48:a6:7e:3e:ab:0c:39:3c:c1:75:28:
de:33:1f:14:4c:23:fd:25:d8:bb:1e:ec:32:c1:dc:
22:44:1a:ab:85:60:ec:e9:54:eb:ce:90:22:fa:92:
a3:e4:f7:13:3c:f3:21:dd:a3:4b:75:88:9e:8e:0a:
b8:0d:61:7c:63:3e:5c:df:51:4e:e9:92:75:7a:6e:
0b:9e:16:13:a3:f3:aa:36:cb:e1:b3:1b:1a:ee:6a:
d4:cc:95:05:a7:0a:3a:1e:fe:f4:42:20:2f:8c:d9:
9c:83:ea:d0:32:a8:48:90:90:c5:5e:8f:f4:75:23:
fc:77:f1:c9:a6:44:1b:a6:f1:8e:bc:2b:dc:d3:66:
ab:d1:9b:91:5f:b1:aa:f7:52:b5:5c:27:05:84:e3:
c5:62:b5:cf:d8:6d:3d:15:80:ce:a8:0a:9a:61:fc:
58:81:35:23:a5:04:ee:64:67:2c:08:26:98:99:71:
bb:67:e9:b0:39:ca:c3:fc:36:be:e8:5f:0b:74:93:
0e:48:c6:ef:5e:17:39:52:9e:0d:0e:b3:b1:de:f6:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:3A:50:B3:44:A6:38:77:3D:8A:8D:E5:69:D0:72:DB:2A:87:55
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:c1:55:a8:49:85:9d:44:c3:d1:21:75:7d:0e:05:08:53:
29:13:a7:27:fa:83:ad:72:20:60:f6:c0:cb:2a:71:66:b3:37:
30:f3:b5:7e:7e:58:f9:cf:1c:20:88:a2:78:2c:6a:c3:82:08:
ca:48:5f:a8:d7:7a:72:a8:36:09:25:95:ee:d7:ef:c2:76:0c:
9c:26:bc:96:89:9f:74:f3:e7:56:3b:d3:31:6f:63:d8:ae:a6:
ef:ca:5f:9f:a6:84:bb:cd:54:ce:83:cd:e8:7c:a3:a4:c9:2b:
70:d2:bd:f2:0f:f3:2a:6c:fe:c7:63:34:91:2b:f8:93:a9:47:
fe:54:84:7c:7d:14:09:bc:57:50:e7:ae:c3:de:24:e7:39:1a:
87:b9:d5:f4:0d:02:6b:9e:bb:6b:f0:77:0a:5f:6e:7e:40:98:
8e:86:26:de:29:4a:69:c0:d8:d9:76:32:e7:0d:c6:97:a1:d7:
7a:a8:59:ac:e8:1e:0f:7d:04:d4:bf:48:62:e8:6c:8d:7f:64:
dc:2c:fe:00:d9:9b:37:51:1b:f2:c5:e9:c9:01:db:72:c6:58:
cc:db:c6:29:1f:e8:c4:89:9a:85:5f:d0:ef:07:e8:a4:e5:1f:
17:81:f8:2b:55:31:4f:60:c5:f4:54:a2:a5:78:26:38:6a:3e:
6b:53:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:53 2025 by rpki-client