Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: itv+/19GoIdeqUN1cHyqVU2GfST9atVVoLAdqMgFmas=
Subject key identifier: 3D:F2:CE:2D:AE:E1:FC:EE:F7:EA:9B:78:FA:A2:D6:B1:3B:40:45:8C
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 01987306ECBC036DF026C5164CD04B76559A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 03:01:30 +0000
Manifest this update: Mon 04 Aug 2025 03:01:30 +0000
Manifest next update: Tue 05 Aug 2025 03:01:30 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: vCWmADdFuxrrJ0jSsAZ4XNtZTUfKdq4txspprdBBS24=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ec:bc:03:6d:f0:26:c5:16:4c:d0:4b:76:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Aug 4 03:01:30 2025 GMT
Not After : Aug 5 03:01:30 2025 GMT
Subject: CN=3df2ce2daee1fceef7ea9b78faa2d6b13b40458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:7f:7e:d0:0e:99:cd:81:0d:93:21:c7:6d:
83:9f:a4:fd:c2:39:77:3c:a5:c4:1e:09:6b:9e:bb:
c8:15:1b:bd:29:5c:9c:d4:1a:02:97:88:e8:c6:99:
41:5b:41:ff:50:5f:87:47:2f:3f:34:33:e1:05:f1:
85:c6:50:4d:b5:9c:a7:ff:a6:c6:ac:00:91:01:0d:
44:78:c8:29:8b:3c:e5:64:c6:b4:ca:5c:9b:20:b1:
6e:3b:33:ce:22:c8:96:9a:d6:8e:01:bd:bd:08:a5:
01:20:29:85:07:f8:89:04:66:07:ba:a0:b1:41:f4:
c5:6c:0b:84:5e:e5:84:65:cc:87:7f:1c:41:a8:21:
eb:63:fd:29:c4:97:87:74:47:51:0f:49:2e:56:1d:
9e:14:e7:8e:ab:83:ab:f6:57:94:ff:fa:49:b6:f4:
53:88:42:03:02:b9:f1:67:7c:03:35:5e:f2:18:22:
bb:41:a1:48:79:8c:b3:7e:f5:0e:10:82:41:1c:ef:
57:24:ab:65:65:1f:eb:9c:29:85:c6:71:38:1e:c2:
5a:42:a4:79:4b:b9:78:13:e9:52:a0:c5:50:20:ef:
e6:be:da:2b:c9:ca:57:cc:b9:a4:d5:c8:cf:91:dd:
6e:2c:50:35:be:76:15:66:e8:d3:38:5e:c6:85:37:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:CE:2D:AE:E1:FC:EE:F7:EA:9B:78:FA:A2:D6:B1:3B:40:45:8C
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:54:c5:7f:9e:62:88:e5:c9:de:9a:5a:e3:ef:9a:24:1f:
10:12:16:a1:5a:5c:21:b8:01:69:6a:04:fb:53:36:93:ff:c3:
ce:61:f8:a4:42:11:60:85:ce:f2:c6:ef:5f:97:cb:c2:8f:74:
9e:83:58:56:04:53:fa:2c:8b:7f:7f:7f:e0:fc:fb:93:53:a3:
04:5f:3f:8b:69:8b:46:96:6e:4d:a7:80:c9:31:d2:d1:1c:3e:
05:a6:ac:b1:fc:7e:08:be:ec:d9:11:ab:55:e9:48:24:fd:22:
56:ff:ea:97:27:3a:a6:95:21:4b:d9:d8:ee:07:74:3f:a4:7d:
49:19:71:50:89:29:10:86:b6:5a:8c:0c:4f:a1:0e:e5:e7:62:
87:62:e1:f2:2b:b1:38:19:92:14:a1:87:87:f0:48:cd:06:85:
d8:69:8e:3f:19:42:d1:3c:5b:b5:6b:8e:86:6a:76:ca:92:ce:
c9:12:d8:ec:27:d1:fa:b3:2b:d5:68:eb:82:ae:1c:81:c2:56:
14:61:ab:e2:7b:a8:08:2b:c7:54:ac:90:0f:ac:56:84:e8:1e:
6e:a0:2b:b6:b3:1a:03:6b:be:7e:ff:12:94:ff:1a:08:c5:45:
4c:95:fa:2e:58:44:6e:d8:24:8f:fd:54:57:23:27:a8:c0:37:
a2:eb:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:23 2025 by rpki-client