Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: ZztL2k7jJy8z9LmUEv8EJgLJJEyyQ79mj3pAzup8sAo=
Subject key identifier: 7D:8F:E4:C5:8E:22:07:9E:E4:C8:C5:C2:25:41:28:50:25:81:63:BB
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019873E390F3DB3111EC6F136FF7C0FB8CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 09AD
Signing time: Mon 04 Aug 2025 07:02:30 +0000
Manifest this update: Mon 04 Aug 2025 07:02:30 +0000
Manifest next update: Tue 05 Aug 2025 07:02:30 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: vXOh/8r6btc79794BNQpWhn9CdAUnMclXQB9ccQnPjw=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:90:f3:db:31:11:ec:6f:13:6f:f7:c0:fb:8c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Aug 4 07:02:30 2025 GMT
Not After : Aug 5 07:02:30 2025 GMT
Subject: CN=7d8fe4c58e22079ee4c8c5c225412850258163bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:4c:0e:8d:7a:0c:cd:a1:7a:5e:b2:f8:6f:
eb:89:e8:72:0d:86:81:a9:08:88:88:b8:a3:ec:01:
2f:3f:f1:6a:41:1b:16:5b:b0:53:1a:75:d3:6a:b0:
31:65:a9:46:46:3d:8f:54:d0:d4:42:f7:8e:c3:09:
8f:d6:b4:30:83:42:b2:1b:1e:b9:8f:d6:83:f3:52:
88:e9:0b:76:e3:7f:92:ab:4e:8d:42:9c:41:95:49:
56:66:65:08:17:e0:7c:96:ff:85:97:28:84:a2:9e:
5b:17:19:e2:c8:eb:59:d9:47:4f:21:7e:88:ed:24:
cb:24:e6:2d:f7:ae:ca:3b:2d:e7:63:50:2f:44:66:
60:14:03:9b:9e:25:c8:3f:9d:e7:94:e7:a1:81:2f:
8b:87:8a:77:6a:b0:dd:87:9b:6a:69:33:c8:a3:17:
75:ae:43:b4:3c:4e:19:70:25:dc:d2:37:07:88:e0:
cf:01:b1:7f:55:36:c1:65:d4:4f:c3:40:cc:86:84:
f5:c4:26:82:73:c5:09:bc:cb:91:9b:a2:1e:bb:e8:
3c:aa:ce:27:34:14:b6:dc:e1:6e:82:4e:fd:c4:ee:
32:46:92:9f:a6:d6:7d:a1:93:7d:54:f8:a6:9a:65:
12:58:e6:bd:5a:b6:c2:74:c5:21:45:1a:53:8e:76:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:E4:C5:8E:22:07:9E:E4:C8:C5:C2:25:41:28:50:25:81:63:BB
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3f:77:fd:1a:df:22:5c:9a:98:b9:ea:40:85:e8:ac:6e:82:
a5:e7:a8:3b:da:48:a4:7f:14:50:db:69:8a:96:73:a2:53:23:
ab:ad:83:5c:7e:34:2c:52:d4:21:d4:0b:39:b0:5e:5b:ee:86:
f8:ab:66:a6:b1:4c:5b:9c:4a:f2:ae:bf:61:dc:37:67:08:fc:
8b:2c:07:b1:eb:d8:33:68:d6:b6:4b:c5:6f:36:54:b1:3e:57:
2a:09:da:eb:f0:06:d9:9f:35:5a:82:74:43:0f:4b:a3:05:cc:
4e:ee:17:dd:77:cb:e7:b9:4f:f1:5a:0c:64:49:d4:81:7f:65:
e1:16:14:23:5a:08:77:6d:31:68:c6:4a:6d:98:34:b0:d2:66:
21:d0:fd:ec:92:18:03:f0:86:50:d4:b8:29:37:09:13:3e:42:
39:5e:17:11:18:7f:ff:b8:99:8c:e9:05:a4:c3:42:1e:c6:c1:
03:a8:5a:31:0b:3a:06:92:d8:f1:5f:aa:78:f6:c6:7e:fc:a8:
04:01:e5:4e:21:a3:81:f5:b2:44:c6:19:29:1c:dc:6d:21:a5:
b0:c3:f4:94:48:b3:42:fc:bf:f5:3d:f0:ba:36:25:31:c2:1e:
e9:79:89:e8:8a:db:de:60:42:e2:c2:13:23:94:2f:de:15:c3:
de:a5:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:03 2025 by rpki-client