Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: H3WT7/O55cZFwbqOSZFR5lSOpTCY8hu3tKWhBrKOQuw=
Subject key identifier: AF:BA:28:67:5D:84:DF:50:37:5E:EA:9D:75:77:B4:A4:7E:5F:8B:A4
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 01988B0EC6A8B5040E47355388ACDE7D2ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0F41
Signing time: Fri 08 Aug 2025 19:00:58 +0000
Manifest this update: Fri 08 Aug 2025 19:00:58 +0000
Manifest next update: Sat 09 Aug 2025 19:00:58 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: RqjLfgBPf51MpLYa/R0tLgwvYWc2GNaAP39yV4mbo0o=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:c6:a8:b5:04:0e:47:35:53:88:ac:de:7d:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Aug 8 19:00:58 2025 GMT
Not After : Aug 9 19:00:58 2025 GMT
Subject: CN=afba28675d84df50375eea9d7577b4a47e5f8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:e8:44:3c:a4:5b:d6:29:8e:5d:d7:55:09:
16:88:d7:29:e0:cf:5a:42:4f:a3:82:f2:22:1b:05:
fe:6f:30:0f:20:f5:14:70:1c:5a:79:2a:ca:78:78:
b8:c2:28:c4:a2:82:45:59:77:e6:6b:c7:e2:95:41:
b8:a5:51:99:c6:60:be:b0:5f:5c:e1:a8:81:1a:6f:
a6:21:67:56:2c:c4:d8:7e:d7:70:f3:a1:3d:b9:84:
0e:53:13:21:21:4c:73:01:c9:be:85:a9:25:47:bf:
a0:6c:c9:21:53:90:1b:34:67:16:78:61:31:ca:e1:
02:1f:a4:10:60:ea:00:81:9a:56:bc:f1:98:7a:e9:
df:6a:7e:4d:f4:cc:29:c1:45:98:68:c9:b1:be:fb:
f7:21:e4:91:58:dd:3d:22:d3:26:4b:66:e8:3e:1a:
42:64:e2:13:d4:9c:c5:df:25:f0:be:99:8d:e5:77:
0c:63:b5:80:ff:37:03:ce:cd:98:b1:d3:79:75:96:
0a:b2:e4:4c:e7:b0:b9:5f:cf:15:06:ac:d4:95:d1:
d4:e6:50:7e:71:a7:a6:7e:09:b0:43:56:6e:7a:30:
ab:c4:55:3d:ae:e6:3d:38:4f:80:7d:d9:36:04:50:
d1:62:43:1c:74:a6:58:93:f2:85:0f:fc:48:57:f5:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:28:67:5D:84:DF:50:37:5E:EA:9D:75:77:B4:A4:7E:5F:8B:A4
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:ad:8b:aa:b7:b3:83:ef:39:39:b9:68:99:77:8f:cf:38:
77:73:2b:43:96:ec:4f:73:3c:ba:82:54:e8:bf:fe:cd:46:1f:
15:f8:a6:fa:dc:e3:09:07:dc:15:ff:d5:72:07:ab:62:57:46:
20:96:26:2d:17:b3:08:fb:7c:a7:e3:92:fa:42:df:9e:e2:75:
b1:42:b0:0f:b0:62:16:e3:b6:b9:28:e0:38:54:24:23:a1:e2:
e6:a5:d1:ea:16:ff:71:5e:0f:11:a7:b7:27:ad:1b:14:99:db:
86:15:09:76:83:32:94:16:c6:a9:05:66:73:e7:fa:0b:11:3a:
1c:28:d1:43:65:b7:77:36:cb:de:7a:0e:69:24:ea:5f:2c:e5:
95:09:23:96:f2:f0:00:83:7a:14:92:47:e5:a1:d0:89:dd:1b:
83:bc:12:b7:4c:93:78:ba:df:ba:bd:66:d3:39:91:7d:24:e8:
c3:92:2c:9c:cf:73:f6:68:e9:dd:e0:72:23:d9:0b:7e:e0:df:
b4:95:13:2d:f8:ff:30:fe:74:13:12:94:34:c8:14:ca:7d:a7:
22:c8:79:8b:80:fa:31:d4:b1:c3:36:a3:fb:17:2f:de:41:b3:
0e:38:a9:4c:a0:d2:04:6a:19:b1:33:dd:60:f8:4c:72:03:e6:
c2:e5:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:03 2025 by rpki-client