Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: csSljaOM4WoObrssQMu/bFXOgmgld1Vm/8tqWUH/aMg=
Subject key identifier: 1F:36:6C:68:69:43:4D:D6:DA:32:5F:61:5F:E6:92:02:B4:D7:07:EF
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0198793FB4E906D1CE6A80C17926B67B6523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 08:01:14 +0000
Manifest this update: Tue 05 Aug 2025 08:01:14 +0000
Manifest next update: Wed 06 Aug 2025 08:01:14 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: EBZszPf2xGB+4LbO8FlBcOvFxJD6P26CDRPI1uDUEEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:b4:e9:06:d1:ce:6a:80:c1:79:26:b6:7b:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Aug 5 08:01:14 2025 GMT
Not After : Aug 6 08:01:14 2025 GMT
Subject: CN=1f366c6869434dd6da325f615fe69202b4d707ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:2c:48:75:3b:ee:2e:dd:ef:34:9d:60:34:
a7:c6:4a:77:df:b1:1f:6f:e0:df:77:92:04:27:5d:
ff:5f:e2:1e:61:c0:4e:68:de:71:9e:06:a2:40:38:
b6:b0:69:c6:64:9a:0c:55:cb:7a:32:44:1b:2d:34:
bb:af:10:3e:dd:75:33:5b:54:2d:15:92:68:d8:5a:
8e:1c:c2:8d:73:a4:0b:37:93:d8:9a:44:1d:46:30:
2e:b2:43:d5:d0:e7:cc:e3:89:3d:a6:6b:31:e3:17:
0e:82:0d:f2:57:0c:26:30:75:e9:fd:09:1c:8a:26:
2c:1b:7b:2b:97:7e:68:2c:7e:41:f1:58:a3:10:a6:
a6:72:10:d8:52:13:82:0f:76:0c:85:03:fb:fc:7e:
92:84:56:aa:d1:4d:65:20:f9:cc:52:1f:49:ef:da:
36:c2:27:e0:a8:3b:7f:46:ed:41:dd:b4:e7:f0:1d:
34:89:b7:0b:47:3e:89:9b:5b:54:60:0b:bb:ee:4e:
12:53:83:2a:41:be:1e:92:a0:db:c9:b6:94:cf:21:
1a:67:42:77:37:1f:4d:af:cd:f5:5b:9a:69:c7:8a:
65:f1:ab:42:fb:a3:13:a2:c1:55:8f:d6:16:37:c6:
ae:b1:d5:f4:e0:3a:89:9f:f3:3c:12:9e:45:f0:2b:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:6C:68:69:43:4D:D6:DA:32:5F:61:5F:E6:92:02:B4:D7:07:EF
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:43:be:44:a3:bf:b2:b3:05:74:c9:8b:37:70:01:fd:ed:
73:b3:c4:a6:59:de:de:c1:a7:f1:3d:19:78:dc:79:13:20:26:
70:9f:94:f0:68:9d:c1:1a:e2:37:a2:39:17:8c:c2:f2:93:92:
71:2e:34:e5:e4:cc:be:a7:d6:78:f1:e3:17:c7:99:70:ef:e2:
c8:6e:4e:ab:ea:0c:cd:63:76:3e:6b:60:d9:40:61:62:d4:2c:
0c:31:dd:8a:8a:ac:9f:2b:ee:80:a5:6a:3c:95:10:91:0b:a7:
9e:37:cd:dd:7e:b4:ae:3e:92:29:16:a4:0f:f3:22:62:83:55:
15:3f:cf:74:91:69:56:35:18:db:ab:8f:fd:e6:49:fa:27:46:
f2:fb:d3:89:b7:a2:bb:a7:ff:74:7d:3e:67:30:7d:c9:33:e7:
c2:3d:e9:b0:e8:24:e6:ff:b0:b1:6a:11:6a:79:97:a9:9f:a9:
4a:03:03:35:9c:a0:25:60:71:5d:1b:7d:68:e8:51:f9:c1:ff:
8b:fc:20:8b:95:f4:0f:5f:7a:fa:db:28:6f:d1:c9:e7:e4:3c:
18:6f:a5:ae:92:92:83:82:5f:4d:bf:87:d2:68:ae:ac:40:af:
ae:d6:85:e7:a6:a2:02:c3:33:ba:5d:b6:85:7b:08:22:b2:d2:
ff:87:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:35 2025 by rpki-client