Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: vFbIbSRu6VL/yYRpUZA7VTIJueihQDQcqCtMtr1DijI=
Subject key identifier: 0B:24:C4:70:D3:C2:67:C3:EC:6F:A7:57:A5:05:2B:34:7E:A9:E1:30
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 0198816693E824738B5C1C2A103A892C8B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 1019
Signing time: Wed 06 Aug 2025 22:00:39 +0000
Manifest this update: Wed 06 Aug 2025 22:00:39 +0000
Manifest next update: Thu 07 Aug 2025 22:00:39 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: y02M0HjZlW8U8pWqT3I51bszvsUdN5T1pIs7Dau2Xc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:93:e8:24:73:8b:5c:1c:2a:10:3a:89:2c:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Aug 6 22:00:39 2025 GMT
Not After : Aug 7 22:00:39 2025 GMT
Subject: CN=0b24c470d3c267c3ec6fa757a5052b347ea9e130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:16:c1:fa:0e:d2:ee:c9:bf:bd:05:12:66:
15:4b:3a:33:c0:f3:41:c1:ee:69:bb:91:b2:a7:f4:
14:7c:42:df:15:1e:70:65:f8:7e:a4:d7:95:0f:20:
29:49:73:55:e6:3e:cf:73:9d:e0:6d:4d:f3:34:dc:
ae:f3:95:f9:4f:5b:e8:31:25:8d:20:8b:f3:b7:91:
50:31:73:33:0b:52:6c:d1:49:f9:7d:d3:ae:bf:6a:
b8:c7:03:03:98:97:f3:52:7c:ab:1e:ed:42:27:5b:
9c:a7:0b:c9:6b:31:c3:2e:2c:81:f4:57:d5:0a:68:
bd:e7:96:71:65:4a:e7:a5:95:11:e0:e2:79:4a:0e:
b0:34:6d:27:f7:6c:43:42:a1:67:b7:a0:0c:a9:61:
89:84:10:61:be:c9:68:b9:53:d9:65:16:4a:c0:52:
b3:27:28:b4:25:2c:9b:ec:6d:39:19:c4:95:6a:df:
fd:6d:ad:c4:cb:f3:5d:9d:58:08:d1:08:37:90:70:
ef:24:97:ff:0a:e3:b6:b3:9d:e1:c7:6f:73:fc:33:
f6:8b:ee:8d:dc:cc:d9:41:17:ab:f8:01:4c:5e:46:
47:0b:6e:91:63:60:6c:91:1c:0e:be:5d:02:9f:49:
41:fd:78:25:77:bb:90:d2:92:8b:15:a7:4c:92:da:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:C4:70:D3:C2:67:C3:EC:6F:A7:57:A5:05:2B:34:7E:A9:E1:30
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:89:7d:0c:9e:9e:9f:52:1b:1e:36:bc:f7:86:a3:9a:23:
5e:94:79:23:20:02:98:70:84:fb:3c:82:71:03:3d:5f:c3:c5:
57:0f:24:04:72:5c:7f:67:52:2c:e8:eb:0f:f1:76:08:1d:ec:
c9:d8:41:00:c9:25:bd:f0:72:10:4f:ba:69:ba:93:00:0b:6b:
f0:fb:ef:71:bc:92:0f:14:a8:f7:9b:c6:67:39:77:81:32:85:
35:67:7e:ff:93:55:18:ae:3d:3e:76:b8:33:36:57:9d:12:af:
fa:8f:00:d0:fc:89:9d:c3:1d:59:d5:e1:65:76:ae:74:60:4a:
37:29:00:1e:ea:d0:40:91:b9:12:15:66:33:a7:98:e1:d3:fc:
e3:20:d6:4c:1c:1f:ff:80:e0:ec:f4:f9:cd:c2:95:28:6a:cb:
9e:d0:12:2c:8d:8b:c4:f6:23:78:8a:62:33:b4:9d:b9:95:24:
d5:76:0b:b2:6f:1b:b3:64:5a:8c:3d:45:ad:d7:94:c4:56:82:
f1:58:f4:05:dd:9f:54:a3:09:ff:fa:f9:a0:31:d5:21:67:52:
2b:49:bf:5d:9f:66:f9:60:f1:67:5d:67:68:e6:54:cc:99:63:
8b:c7:2f:95:48:58:3c:ac:07:57:66:42:2a:70:0a:d7:a5:a5:
33:13:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:28 2025 by rpki-client