Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: tF+fvsqsjryFlioXr3K0JHxMqD5xHhpc0+jo5TV332o=
Subject key identifier: 55:D7:24:34:42:FD:25:78:56:DD:73:FB:59:63:26:76:17:6B:6E:F6
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 01987D8AE74EE681357FA916C98848B6B241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 1558
Signing time: Wed 06 Aug 2025 04:01:51 +0000
Manifest this update: Wed 06 Aug 2025 04:01:51 +0000
Manifest next update: Thu 07 Aug 2025 04:01:51 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: nEDIfDlBhkXUbu5UC/ySSFf5S2sDfA3Jf3hFN+wfWDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:e7:4e:e6:81:35:7f:a9:16:c9:88:48:b6:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Aug 6 04:01:51 2025 GMT
Not After : Aug 7 04:01:51 2025 GMT
Subject: CN=55d7243442fd257856dd73fb59632676176b6ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:1a:18:88:d6:c3:fd:62:01:6a:5a:99:c0:
eb:ff:d2:ee:27:5c:e3:81:08:56:de:ac:05:cb:e4:
8d:30:50:09:62:fd:45:df:58:b7:74:45:ba:87:0c:
c2:8c:e6:78:f1:d4:e8:c8:6a:2e:63:11:0a:0a:be:
6a:d3:22:93:f9:bf:ae:f1:72:db:9f:9e:67:5d:6e:
9c:9d:bc:2e:30:a3:c3:b9:a8:c0:25:cb:fd:04:6f:
cd:9a:6f:88:fb:fc:d7:58:c8:62:78:25:53:fe:72:
e3:9a:1c:d0:30:bb:49:4f:e1:fe:9f:73:e5:48:8b:
88:d6:f7:e8:50:66:82:82:f1:76:73:1e:6a:f1:ec:
03:1d:93:7a:19:15:94:a8:64:3e:a5:17:74:05:4c:
5f:5e:99:08:a2:1f:7d:6a:67:f5:72:23:c6:3c:20:
40:d6:e1:42:9a:59:be:14:55:03:81:95:56:20:83:
e8:44:a8:02:ce:1a:4a:60:71:08:b4:a5:3c:e6:be:
e4:db:87:59:b0:c4:00:70:22:0c:ad:4e:e3:4c:33:
96:ab:cc:72:e9:a3:08:fb:97:77:7b:9c:15:5b:bc:
07:18:74:73:b2:8c:a2:a7:f4:4d:a0:e1:82:a3:3e:
22:f9:e5:55:78:b4:6b:7b:ab:7d:b3:d1:0f:bb:c9:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D7:24:34:42:FD:25:78:56:DD:73:FB:59:63:26:76:17:6B:6E:F6
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8c:d0:63:35:32:3e:9d:42:bb:38:d9:33:fb:d2:b2:e9:90:
9b:81:25:fe:92:9d:b2:28:e1:9e:cd:d5:57:b4:5b:af:f0:8c:
21:fd:cc:50:ed:45:97:ad:60:10:46:8a:08:35:6c:59:b3:37:
dc:91:95:93:c3:52:5e:b6:69:0a:d6:65:a1:0a:69:7f:a2:05:
9d:b7:eb:a0:89:e8:52:fd:91:71:cf:4e:19:2f:44:76:4c:79:
8d:ab:18:46:7e:f2:ac:4f:62:3e:be:33:3a:80:b6:5c:a9:91:
3c:32:0c:59:e2:8d:50:d1:ea:d1:43:7c:6b:59:44:bd:5f:a9:
d3:3f:2d:af:34:52:c5:70:46:58:92:10:e0:97:5b:5a:22:fa:
5d:fd:a3:23:42:1e:47:51:05:22:ad:73:98:23:97:bf:61:5e:
e3:29:c0:c6:4e:74:ab:4d:d2:b7:cf:7a:04:ef:9e:76:ee:57:
1b:a3:ab:14:3e:eb:7f:3a:0b:32:06:f9:78:ce:05:d1:98:10:
22:88:7f:f8:f4:62:94:2c:d5:d5:20:6c:5d:16:0c:73:50:d3:
e1:85:68:45:b4:f3:49:a8:9d:58:7c:3f:a7:cc:cc:30:3b:34:
9f:ea:cc:bf:b6:e2:41:3d:83:ee:24:50:d0:45:52:f4:e1:d1:
e7:30:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:09 2025 by rpki-client