Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: fAYvitBQIq/q8zMbeXAweDDkqaR9LIRfwr/jmbyiiyU=
Subject key identifier: 20:2D:58:8B:4A:59:49:A2:EF:3B:39:2A:8B:2A:BA:F2:FF:05:30:64
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0197C500DDE010992737403C97B59A441FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0929
Signing time: Tue 01 Jul 2025 08:00:57 +0000
Manifest this update: Tue 01 Jul 2025 08:00:57 +0000
Manifest next update: Wed 02 Jul 2025 08:00:57 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 2oOlQTsfO7P22jGSPzc2agnM9Qjrg/Wt+RZ9suGETm0=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:dd:e0:10:99:27:37:40:3c:97:b5:9a:44:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jul 1 08:00:57 2025 GMT
Not After : Jul 2 08:00:57 2025 GMT
Subject: CN=202d588b4a5949a2ef3b392a8b2abaf2ff053064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:32:3c:1e:d3:71:92:b8:cd:df:e2:46:13:
ee:39:eb:19:38:ac:2a:49:23:90:8e:98:18:0f:ff:
f6:1f:b5:87:31:9c:85:ba:6f:ad:48:01:97:2f:14:
d7:bc:05:3f:34:e5:b7:1b:b5:d1:1c:78:79:55:00:
f7:75:16:8c:aa:05:08:04:70:3b:c7:f8:9b:c9:67:
dc:06:ed:bc:42:57:d9:ba:f4:81:78:99:d3:62:37:
d2:57:88:9d:b0:fd:c2:1a:07:54:d5:27:30:b2:07:
7f:e2:7d:db:53:f7:3d:a1:9b:3d:d0:0e:ad:8d:49:
5d:8a:87:56:76:16:15:57:8d:f4:fc:78:c4:7f:87:
42:c2:f6:61:a5:46:07:a3:02:e1:ab:4a:dc:f6:80:
2d:87:51:65:11:8b:6d:a6:ef:aa:12:46:6e:03:58:
fd:73:dc:dd:61:95:a6:2e:92:44:3a:92:4f:28:b7:
df:8f:58:72:b6:1d:f1:67:71:8a:35:68:6f:47:17:
ab:45:f1:83:fb:1f:c3:00:75:76:e2:40:03:a8:40:
14:d4:a2:ba:21:1e:9f:6e:0c:af:18:2c:04:1b:54:
9f:e0:60:a8:b0:bc:1b:37:6f:1f:6b:d3:ef:5a:af:
52:96:f8:1b:ad:9f:f0:fa:06:8a:93:a1:cb:08:1d:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:58:8B:4A:59:49:A2:EF:3B:39:2A:8B:2A:BA:F2:FF:05:30:64
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f1:e6:d2:f4:39:44:95:13:09:b3:88:86:60:23:1f:2d:98:
aa:24:1a:3d:63:86:78:48:77:1f:0c:e2:e1:18:eb:2f:87:a2:
8e:0a:de:21:48:57:3a:45:dc:35:8a:f7:49:6e:fa:76:1a:a2:
02:69:fb:05:53:45:97:46:54:a0:5b:68:df:4e:ec:8a:0a:96:
77:67:0b:36:4a:83:07:cd:8e:73:a6:8d:a3:37:30:ca:d4:8f:
95:17:89:70:da:5f:0c:a1:71:68:77:ff:53:d0:6f:0a:69:a8:
ef:df:71:54:1b:4a:c9:be:aa:ea:6f:f6:7a:9d:f1:73:50:73:
86:1e:e3:0a:c2:5b:82:6d:57:99:2a:02:0e:8f:71:99:6f:db:
98:44:fa:c3:f7:54:dd:39:17:c4:e8:ae:f5:fd:e9:a7:f1:06:
50:94:dd:0e:a1:fd:9f:52:9b:05:6b:5c:c3:30:da:2e:a5:c3:
34:fd:58:97:53:0f:f4:81:71:2d:59:e0:89:c5:32:66:e3:5f:
a0:85:08:6b:a3:c4:f4:60:88:f3:ad:2c:eb:30:46:fe:ea:45:
14:db:94:70:1a:79:bf:b4:f3:58:c8:6c:32:6d:a8:72:c9:5a:
b2:a1:be:d6:7b:17:34:46:cd:e0:19:d4:f7:c2:cb:4e:34:a4:
4a:b4:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:01 2025 by rpki-client