Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: sNTWQLMPo1lMx6HNAG5GVGO6v1zAZ6/FeDEQbtt+Bac=
Subject key identifier: 59:31:07:9B:B5:72:CA:DC:0D:13:AF:18:08:82:FB:98:8B:33:62:02
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019872CF8F13E4E44A5CB48FB914FFD3F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 107A
Signing time: Mon 04 Aug 2025 02:01:01 +0000
Manifest this update: Mon 04 Aug 2025 02:01:01 +0000
Manifest next update: Tue 05 Aug 2025 02:01:01 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: OFMmTdKr7ada90VX6wbuz810BE9M7yQZtDV1C+Cmw+I=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:8f:13:e4:e4:4a:5c:b4:8f:b9:14:ff:d3:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Aug 4 02:01:01 2025 GMT
Not After : Aug 5 02:01:01 2025 GMT
Subject: CN=5931079bb572cadc0d13af180882fb988b336202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:90:42:6b:19:50:5e:db:74:51:4f:47:ca:
d2:c8:9f:ef:37:ed:c7:27:bb:75:cb:b9:ba:6c:ba:
ad:7f:86:f3:f7:db:bc:aa:ee:ed:90:d6:ae:45:a9:
72:03:7c:a8:c3:38:18:d0:bb:6a:5a:a8:f7:9b:1d:
5f:5a:3c:f9:a6:3e:e9:16:3c:b0:85:4b:f1:39:ad:
ba:b0:d1:a4:26:65:e2:0e:30:ff:eb:20:15:7a:9f:
84:22:4f:0f:aa:a2:71:bd:b2:1e:6b:fd:e0:42:cf:
4e:de:ae:37:4f:15:70:05:7e:03:77:a6:83:34:5f:
e5:c3:3f:a0:95:f8:96:79:39:87:c7:09:6b:53:28:
a7:4e:16:74:8d:48:ac:08:87:ba:24:13:82:e0:f7:
ca:88:ed:9e:89:0b:04:6c:23:b0:7a:d6:20:37:b4:
6e:ed:36:1f:98:fd:cf:5c:b7:72:89:b5:d7:78:3c:
b1:6a:bd:4c:19:30:80:4a:74:3a:8d:eb:ab:4b:c4:
8d:52:a0:83:42:c8:44:36:17:07:c4:20:99:bb:35:
5a:21:63:a8:5d:ac:2c:6f:7b:53:fb:61:bc:2b:28:
2e:c3:b0:02:39:32:f6:73:3f:a6:d3:77:6a:84:f2:
ba:d6:8e:48:96:67:9c:bd:24:de:6d:05:89:31:98:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:07:9B:B5:72:CA:DC:0D:13:AF:18:08:82:FB:98:8B:33:62:02
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1f:37:90:21:7f:e3:4e:13:1d:bf:38:d0:ae:b4:a5:26:ec:
bc:ba:67:74:f2:f6:0a:ca:b1:df:2e:ef:cb:e3:aa:09:a7:1d:
e6:9f:43:20:06:f3:ab:13:bf:dd:96:88:a5:53:2d:5a:be:2d:
db:65:23:49:4a:a3:0b:d6:4d:68:1a:f1:70:8c:07:9b:dc:35:
e8:30:4e:96:ff:7b:69:96:38:62:6c:ef:50:13:11:05:6a:f3:
70:72:76:a3:8c:00:13:5e:79:b2:6c:96:4a:fb:85:6a:4a:fc:
4c:0d:ed:31:76:de:99:4d:29:06:82:da:50:28:5f:a2:c9:b6:
32:5d:fb:de:88:f8:ff:b1:b2:d7:ad:dc:24:d9:32:65:96:51:
5a:86:7d:7d:c5:47:b3:cd:00:2f:6f:4e:4f:1e:04:cf:79:d0:
68:9f:39:70:1b:87:87:aa:37:45:b5:2f:8d:51:a8:c2:35:c7:
73:cc:98:8b:26:ca:99:4a:da:a0:7b:cd:8c:6d:5e:85:0e:f5:
47:44:cb:72:4d:c5:30:b4:82:21:cf:f3:c7:40:95:1c:35:b4:
1b:c8:dc:8e:ad:53:d3:59:ad:62:13:f5:b1:29:43:f9:ab:52:
3b:aa:f7:3d:65:e7:b4:fb:e7:d2:6a:3e:5b:6f:74:d4:f3:3f:
19:50:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client