Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: yKeL4/CzeRVG8C/CLSErOCnEefddqwwGWwg2e/Bc1dg=
Subject key identifier: 65:C9:7C:7E:18:66:98:3A:C7:22:5D:97:24:C7:92:D0:B9:CB:58:EA
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0198D5BC179B7A5EA5336B31E3B7D394114A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1661
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: Fd4OnVlTKOXG1FdUR4mvQrbFIIUAcG6rvIUxcu2JicI=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:17:9b:7a:5e:a5:33:6b:31:e3:b7:d3:94:11:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=65c97c7e1866983ac7225d9724c792d0b9cb58ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:b9:c1:ba:06:0b:f3:6c:fd:a1:03:94:a9:
cf:0c:31:d8:d2:51:21:54:d3:55:42:5e:c9:ed:f8:
c5:7b:28:6e:e3:e3:44:9b:34:3a:17:c4:5a:e9:57:
fd:9e:29:e7:5d:71:91:51:4b:1f:63:be:76:ae:da:
92:e0:8d:f7:b8:1f:32:f9:9d:0f:96:e1:2c:0d:d1:
cb:c9:55:d5:46:a1:11:a3:00:d9:50:65:0e:e9:7c:
2f:2c:1f:fb:26:bd:57:60:9c:a1:30:9d:ed:18:bd:
d6:a8:3f:1b:2d:41:c9:4a:4e:54:21:18:78:2a:10:
98:7f:39:36:b7:c6:bc:0a:9f:4f:9a:50:31:8e:ee:
3e:1f:06:de:72:a6:10:0f:c7:af:18:2f:95:e9:96:
59:9d:3a:f3:d6:15:27:b7:33:4b:f7:04:b3:48:45:
a2:99:bd:9a:60:1a:54:d8:d4:f5:19:50:f3:2b:55:
b6:e0:a7:05:35:ad:9e:0f:ae:f1:ae:1d:a2:d1:43:
b3:3a:62:30:ec:36:9a:de:fa:08:4c:84:1e:86:37:
40:95:20:38:8f:5c:0a:3e:84:85:25:5d:95:8d:db:
c1:66:9d:ca:e9:82:4e:15:23:eb:0a:0a:72:80:87:
5c:f7:e6:e4:37:d8:a2:6a:72:63:9c:b9:87:f6:0d:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:7C:7E:18:66:98:3A:C7:22:5D:97:24:C7:92:D0:B9:CB:58:EA
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:19:b8:88:9c:91:6e:c8:1c:f0:a7:7a:c6:b6:c4:03:98:
2e:e8:5d:b9:d2:02:26:a7:25:47:30:ec:3c:a4:f6:ad:a8:64:
dd:52:b9:5d:bd:16:01:d9:c4:20:c9:43:a9:1e:d0:d7:b9:4d:
84:51:dc:84:84:20:6e:be:db:34:e2:e2:53:ac:df:16:3c:56:
8b:9a:7d:16:b1:c2:22:03:5f:91:ed:8f:fd:3b:83:07:ae:7d:
43:34:5e:dd:f2:0a:8b:c4:01:b1:5a:ef:a5:14:d9:8c:6e:0c:
d5:bb:de:0e:02:cb:e2:76:73:bc:24:70:80:44:bb:cc:0a:49:
58:60:0f:c5:af:59:8c:74:da:7e:5b:f6:70:21:cc:de:90:e6:
70:7f:ea:0b:d0:ec:84:e5:b6:dc:23:84:03:95:3a:c7:7d:0c:
92:11:20:be:6a:bb:c0:4e:0e:b2:02:6b:54:49:a5:e3:91:55:
0f:54:86:12:98:38:dd:12:bc:c3:71:6b:49:5e:b8:a9:b3:58:
a8:a7:11:47:a8:fc:81:47:97:86:b0:f0:9d:f0:10:bf:a3:55:
6b:d8:9d:94:ce:9a:72:17:88:8a:f7:d8:9e:18:cc:a6:41:47:
07:ee:f8:13:d3:51:d3:d1:cb:a3:a1:af:99:e5:79:e9:7f:7b:
34:86:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:27 2025 by rpki-client