Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: 4GGi045FuROYPyIUhttk9rHzBx3tly88qjBVqWIYyZo=
Subject key identifier: D0:76:C6:56:15:61:1E:FE:14:38:16:C1:97:FF:D0:49:DB:5F:76:95
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0198D54EA9ACBA8FBDFFF670F440BB607BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 09B6
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: w0kFKT32rz1a4O4TDZVBdGK/qvLNQtseYw1DtUPmvmM=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a9:ac:ba:8f:bd:ff:f6:70:f4:40:bb:60:7b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=d076c65615611efe143816c197ffd049db5f7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:bc:73:4d:19:ae:b0:20:e9:5f:a8:f3:f1:
35:f6:a5:a0:00:34:b6:4c:35:cd:61:18:0a:1c:5d:
8d:8d:98:de:f2:82:92:fe:3c:3b:8c:f2:c5:07:73:
27:1d:87:79:d5:45:e3:25:a1:8f:81:6d:3f:bb:53:
b6:82:bd:f1:d2:4a:e4:db:80:f5:63:4f:3b:ed:21:
6d:4e:33:c9:34:44:e2:37:c5:48:8d:12:22:6c:97:
a3:54:52:7a:64:d8:26:60:c4:40:e5:0f:99:ec:b7:
66:7e:f5:a0:4e:3f:65:7f:c1:94:ab:3d:72:62:d3:
2b:cf:17:ec:08:e3:95:ee:8b:08:48:68:91:ee:28:
03:67:a1:41:82:f1:5e:3d:ab:77:c0:8e:6b:74:f2:
1d:29:60:49:34:29:2f:6e:e2:77:96:cb:24:81:4d:
60:35:5f:8d:58:eb:96:e8:79:46:95:19:49:26:e8:
74:a0:af:15:e4:17:85:ed:bb:14:94:b6:fb:bd:9d:
f4:d4:dd:04:01:6b:af:f2:01:ce:4a:af:c9:2e:10:
5e:5d:dc:30:11:67:ca:c4:4d:60:b5:9d:b9:1d:0a:
38:aa:2e:d5:b6:7f:60:8f:6b:19:ba:54:c7:27:29:
c0:70:11:49:ec:11:9e:25:4c:16:9b:2a:0a:ec:4d:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:C6:56:15:61:1E:FE:14:38:16:C1:97:FF:D0:49:DB:5F:76:95
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:34:3c:e5:ac:a5:f1:ea:80:c8:51:7d:16:37:34:48:4c:
a7:ca:da:1e:6d:b8:94:33:08:8f:51:0c:27:02:86:47:b6:29:
25:57:f6:2c:d1:00:01:73:08:86:02:a2:af:73:db:e1:d2:99:
1e:71:f9:bc:06:5b:b9:8c:b0:34:14:c5:3b:9b:91:bc:6f:b5:
fa:9b:c9:68:40:98:12:ae:5d:ab:f0:ca:78:bb:01:c8:45:a7:
30:f2:e1:63:54:bc:7c:62:de:45:bb:f4:af:b1:25:dd:86:15:
1e:4c:77:a5:95:56:1d:95:dc:63:2c:e6:64:e8:f0:bd:bd:6d:
87:6c:1c:30:c8:98:37:e6:2f:b5:d4:2c:92:2e:b5:1f:b6:0b:
c2:df:a6:fb:67:19:7b:18:7d:89:a5:d4:37:cb:6e:94:7d:50:
a8:f7:67:6f:19:c2:13:9f:f9:95:af:45:ed:3f:fa:ac:e8:3d:
61:e8:49:d8:05:0f:35:07:34:80:d5:18:c6:88:d2:4a:4f:4e:
29:09:32:ce:b7:df:36:a7:6d:93:3d:f3:b5:1c:66:ec:b4:f0:
2b:27:2f:ac:06:70:72:f4:88:53:75:66:0e:e9:1f:67:f5:9d:
3a:bf:ea:09:1b:71:45:c8:14:3f:2d:8a:a3:1d:b7:14:d7:f3:
28:e3:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:42 2025 by rpki-client