Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: m+c6a6VE6KUE9MYH3Mcotw1ALKeblR4MRXJwfYhquRc=
Subject key identifier: 6A:32:2F:A3:62:17:D7:67:11:4C:E2:71:3A:9D:50:2F:CA:CC:C4:85
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 0197B63290CDB69BF7CAF9782202DCF1D394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 02AD
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: BORAT8cLBJtxRtIHdjUcmntWlSr99Mq4XujNU1/eqJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:90:cd:b6:9b:f7:ca:f9:78:22:02:dc:f1:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=6a322fa36217d767114ce2713a9d502fcaccc485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:e1:41:d6:7d:78:b5:73:07:4e:22:d7:4a:
a9:51:8c:3b:25:2c:56:73:fe:40:37:a5:54:33:6b:
c3:64:1b:03:16:9e:e0:7e:a9:b3:94:4f:86:8d:91:
a9:12:95:27:b7:03:f6:a4:ca:37:62:8a:3b:6a:6d:
fd:b2:77:06:c9:d7:10:da:6e:b0:3e:2b:bb:4f:2d:
11:d0:ae:75:52:68:54:eb:59:83:71:63:4b:54:67:
91:7e:5f:9f:bb:4c:9f:e9:75:f7:93:a0:4e:cd:91:
c3:25:38:91:33:2d:27:c7:7c:92:7a:2b:e3:a4:6b:
24:85:0f:57:ed:ea:0b:90:6b:f1:e9:68:c4:f2:bb:
76:31:11:c1:56:e5:a8:1f:67:75:ef:26:6b:48:34:
7d:99:5c:f3:5d:c9:1c:c5:ce:3b:42:d8:ca:f5:7e:
88:03:d8:f5:95:1e:c5:e9:2d:f4:f5:dd:5f:9b:49:
ef:66:71:3c:09:dc:2f:87:b2:b0:81:46:a7:33:92:
33:29:56:2c:61:e0:c4:d2:20:d8:64:f9:97:06:8f:
97:75:54:9f:73:39:f7:a0:7c:5e:c0:de:f4:82:0e:
43:25:46:9b:10:cb:cd:34:99:40:00:64:71:db:ba:
a1:56:11:84:62:dd:cb:d6:5a:7f:5d:5f:67:c2:a4:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:2F:A3:62:17:D7:67:11:4C:E2:71:3A:9D:50:2F:CA:CC:C4:85
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a7:41:37:46:56:a8:d3:90:3c:e3:72:c7:6f:6a:0d:b4:eb:
7f:62:ad:8e:59:7f:9e:83:66:a2:49:db:aa:29:d0:98:03:ae:
6c:c4:d7:e6:3c:62:7b:06:d8:85:16:12:25:4b:1d:01:e4:cc:
fc:b2:c7:44:f3:58:33:7c:b6:b9:55:e6:56:1b:56:63:28:33:
89:aa:b7:1a:7f:26:f9:cd:aa:ac:33:9c:d4:83:65:19:2f:1a:
53:79:eb:ef:ff:f0:a2:f1:71:a7:f6:68:cd:bf:9d:20:fe:e8:
63:7b:df:04:70:43:cd:e7:8a:c6:9b:a1:cb:03:e2:27:bf:92:
29:44:bd:ef:a0:76:9e:f4:54:dc:14:16:c1:cb:f9:b2:63:1d:
82:47:be:84:be:15:00:e9:d0:2b:b9:9f:67:fa:80:8b:38:a3:
2b:71:54:4a:46:98:1e:8d:d4:19:7d:b5:e5:03:7f:ec:9a:8a:
c2:86:05:5d:60:53:0f:80:14:42:67:7a:a8:a4:6f:54:5c:d1:
49:e1:b4:94:ce:04:6f:d6:d7:a9:6f:ed:50:bc:15:29:77:3b:
2a:03:65:4e:bd:ab:48:f8:e5:34:29:48:ff:33:20:e9:47:ef:
97:0c:c9:3b:be:2d:0a:60:18:b6:a9:10:a2:db:c9:46:e6:b2:
a8:04:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:40 2025 by rpki-client