Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: GPeXIEvVhGdKSyyU43+Ogsf7cDKWrP7F6jlyxhZGZ74=
Subject key identifier: AE:1A:54:35:AB:52:09:6B:A1:85:F6:8C:1E:89:32:78:28:38:88:43
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 0197B6D7BFF3F8DC9D24A0B6F82EE40FC878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 09A5
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: 3S9wV8fMfs7gP8Ag4YU49lr7l8a6sz/NbuvmD02+s2E=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bf:f3:f8:dc:9d:24:a0:b6:f8:2e:e4:0f:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=ae1a5435ab52096ba185f68c1e89327828388843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:b5:20:b8:14:f1:96:5c:1a:d9:d4:16:50:
e1:6f:1d:b9:65:5d:36:56:0c:76:71:e6:fa:f4:9a:
36:2d:fb:b9:98:96:c1:1f:67:96:05:0e:93:58:3c:
15:38:61:a7:ca:49:05:3e:9a:94:d0:18:30:01:50:
02:dc:bb:6f:62:0f:81:3b:fc:27:49:0f:63:5d:26:
6d:ea:bb:01:dd:42:4b:1c:dd:4c:d2:a7:b3:5d:9b:
d1:18:03:6b:38:9e:74:8a:f5:d9:79:38:2c:d5:97:
00:89:70:69:ed:59:64:28:32:91:8f:81:d9:40:5e:
69:5c:ee:d1:ba:34:c9:a1:9b:e5:dd:22:26:9a:14:
88:34:fe:11:64:1f:41:e3:34:ad:cf:d3:8f:7d:94:
9f:c4:2d:6a:fb:d4:1b:db:17:6a:5a:2e:b8:c7:02:
09:cc:ab:b4:2f:0a:19:b4:87:5f:f8:9b:90:5b:80:
68:9a:78:0a:44:36:ab:8e:09:35:72:de:59:1c:d9:
80:f1:e0:79:9e:cd:3e:a2:ce:ae:cb:87:0a:93:f6:
75:85:9b:ae:52:c4:ee:51:27:ed:b5:94:23:ed:b8:
18:3a:12:ae:ae:db:5a:10:b2:fc:60:a1:e2:75:10:
ed:65:9c:4e:6b:93:6c:23:de:0c:fc:04:68:1a:3a:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:54:35:AB:52:09:6B:A1:85:F6:8C:1E:89:32:78:28:38:88:43
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:19:a3:50:1b:0d:7a:00:71:1f:74:e1:16:96:af:b3:bf:32:
d1:01:c1:ea:fd:b3:3d:38:91:7d:13:3c:8d:c7:1f:7e:0a:bb:
dc:62:65:db:5a:89:33:b6:08:82:bd:07:e9:50:15:2a:10:56:
c6:e7:1a:9d:b0:f9:a1:63:96:fa:1a:1c:cf:1b:be:d1:a2:41:
8b:f4:80:c5:5a:56:66:ba:70:d7:1f:45:4f:1e:2c:7f:71:f7:
58:13:41:05:b4:79:14:6f:64:61:d1:87:b0:f3:de:da:a8:1e:
20:ff:5c:72:36:fc:89:1f:43:97:d7:2f:f7:68:98:60:d1:d0:
94:eb:3f:c7:06:8a:44:9a:3a:0f:74:04:98:50:b2:d8:f0:2c:
fc:b9:90:37:e2:72:0f:5c:6e:12:7a:4e:8c:01:3f:40:29:32:
54:84:9d:e6:aa:64:60:ba:38:ee:7d:7a:f6:95:1c:9e:e0:0b:
96:aa:d1:9f:38:93:16:0a:80:6a:91:2c:6d:b1:dd:80:40:17:
28:55:17:f1:c2:e7:f8:92:34:9b:50:fb:40:d4:aa:13:fe:0d:
88:e9:27:fa:58:fe:f1:b2:6e:a5:37:1e:c0:26:81:89:fc:a7:
d5:f0:17:91:d5:d0:81:3b:07:64:7d:c3:7e:18:4b:1f:8f:a4:
35:c7:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:11 2025 by rpki-client