Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: BwEBCRIC+wUd8x1si6HsaJmSyYH76wli74Wpht9iVcc=
Subject key identifier: 9C:1D:BB:E4:D1:C6:36:82:84:31:04:2B:5D:60:5C:EB:B7:88:1F:C6
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 0198D404878DD9654201FE86C60E8ED1228D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 0341
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: Exku6fqNFuz0rR8Syi0xKs5cvkRWQw9geURcmf4RqL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:87:8d:d9:65:42:01:fe:86:c6:0e:8e:d1:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=9c1dbbe4d1c636828431042b5d605cebb7881fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:02:1d:b0:74:c6:ec:b7:5f:ef:57:94:93:
39:75:cb:5b:2b:df:6b:0c:19:36:fe:10:a8:6b:d1:
07:85:27:22:9b:64:4a:bb:d8:48:5a:09:9a:85:e6:
a4:74:19:0f:49:ec:8f:72:29:bb:0c:b7:f8:63:3a:
30:f9:71:74:f3:1f:4b:f7:f6:a4:09:5f:95:89:84:
9e:d8:af:a4:76:a2:f0:6e:cd:ad:e1:c9:f9:2b:61:
f2:79:bc:dc:0c:a0:5f:56:b2:22:57:35:d5:3d:fc:
62:39:7d:00:ea:f0:8b:82:af:8e:e9:55:7a:77:73:
68:37:84:bc:e4:44:1c:6a:5c:4d:00:3b:75:40:c8:
ea:8b:6a:a5:51:34:a7:59:2b:5f:c3:29:b8:13:40:
42:37:84:83:18:5f:c9:89:6a:49:6d:38:75:ee:ee:
75:c7:85:86:14:a8:da:fe:0f:4c:9b:a8:2a:d0:60:
02:91:c7:eb:e8:dc:77:49:b6:07:cb:0d:12:c6:72:
01:c6:38:be:c7:d6:49:c0:9f:00:92:48:be:3f:40:
0e:c2:97:9f:ba:a8:49:62:ae:38:b1:15:50:d4:c2:
d9:2b:7d:38:07:ca:ef:15:27:85:2e:e1:50:51:c3:
41:ab:55:c4:53:32:a8:ed:33:b4:58:57:2e:88:96:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:BB:E4:D1:C6:36:82:84:31:04:2B:5D:60:5C:EB:B7:88:1F:C6
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:39:ed:97:88:37:62:88:07:1b:e0:34:b4:0c:6f:dc:56:eb:
e7:c1:4d:42:34:1f:d1:94:15:a4:88:55:3b:8b:2d:3a:d3:44:
69:7d:85:fd:71:fd:f1:b0:8a:d3:d5:93:de:70:21:83:45:93:
d6:b9:99:e2:8c:64:85:e8:ba:ea:fd:70:7d:ab:e0:59:83:8a:
42:6f:a7:02:bc:88:83:48:68:3b:b3:c5:a3:66:ba:88:fe:09:
b6:40:5f:88:b2:d6:af:93:49:e4:da:eb:45:db:de:cc:ef:06:
05:6f:81:71:59:98:22:5b:92:bd:07:0b:38:92:9b:cc:66:f0:
55:88:26:6b:38:44:85:15:c4:4e:b5:5d:45:4a:d8:7f:6a:cf:
86:65:7f:e4:44:24:d9:e1:c8:a7:f3:7c:7e:c3:a9:ab:e8:4b:
1b:66:64:ad:5b:4e:1a:bf:e8:a6:6c:5b:ed:43:6c:f5:30:24:
2c:d2:5c:1d:5e:34:60:3b:a1:37:a5:57:a1:65:72:08:c1:92:
1f:e5:77:8c:a8:c4:b6:38:5f:af:da:85:0f:2c:a8:30:7f:f5:
d1:49:1a:95:20:b0:e5:a5:92:42:4d:62:fe:3a:a4:1c:00:79:
ab:c8:22:f1:bd:c4:a8:c0:14:53:5d:85:ed:18:f5:ef:cc:1a:
43:2f:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:08 2025 by rpki-client