Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: RDjdZ6IHLWZUnFJOp/M1cTO5m6pEI1CTp0tJ55jGkSY=
Subject key identifier: 98:2A:2B:CF:69:DE:B8:96:01:70:31:8A:9E:A8:BE:E3:E2:43:F4:9A
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0197B5FC50B25799C6DB03ADB7DA7CEDC287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 05CE
Signing time: Sat 28 Jun 2025 10:01:41 +0000
Manifest this update: Sat 28 Jun 2025 10:01:41 +0000
Manifest next update: Sun 29 Jun 2025 10:01:41 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: EClLBEpLgPzDTR1qhxazVJAoJOTQ8JZotqbQB0V1XVo=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:50:b2:57:99:c6:db:03:ad:b7:da:7c:ed:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jun 28 10:01:41 2025 GMT
Not After : Jun 29 10:01:41 2025 GMT
Subject: CN=982a2bcf69deb8960170318a9ea8bee3e243f49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:9c:9e:4f:29:5f:59:ff:72:e0:34:96:d7:
57:8d:30:e2:32:fe:af:1c:26:36:46:0e:a7:9f:c8:
95:81:32:70:ea:58:cd:86:1a:5c:0c:72:5c:15:6f:
78:0e:10:67:9b:b4:28:c8:bd:df:16:32:54:18:9b:
23:33:28:45:30:8e:a6:51:cf:24:d7:74:e4:f0:da:
e2:35:a7:51:2b:d9:4c:34:aa:cf:53:b4:20:f5:eb:
12:d2:fd:7f:04:a7:26:d1:2d:b5:db:1e:58:db:2a:
a6:5c:45:4c:8e:ec:73:97:64:de:3e:0a:33:68:2c:
4d:3a:a2:4b:02:ab:14:41:b8:b6:ac:8f:a8:f4:68:
8a:b3:6d:2a:0c:ac:44:ef:4a:9a:67:a6:e1:34:5c:
90:d4:53:db:c0:d3:c9:d7:db:c3:dd:0b:6a:bb:4f:
99:a8:d7:f9:b2:e0:d2:ae:09:68:08:40:67:65:4a:
5b:32:70:2f:56:02:90:84:f5:0c:72:48:8e:b5:aa:
f7:d8:a5:20:36:50:fb:64:69:6b:54:f6:7f:a1:c4:
0b:44:89:8e:24:f8:43:b4:18:58:f1:12:56:2f:d4:
e0:6e:13:6a:02:61:7c:ff:65:6f:c7:28:af:fd:37:
09:2a:f5:26:d1:e7:e0:7e:78:c2:1a:ac:cf:70:97:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:2B:CF:69:DE:B8:96:01:70:31:8A:9E:A8:BE:E3:E2:43:F4:9A
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b9:b6:ed:ae:67:ff:ad:0a:08:ff:f4:bc:ec:a3:49:29:86:
74:8e:a5:b9:37:0f:fd:3b:a6:53:48:ec:67:5b:09:f6:75:8f:
9a:e5:b6:a5:80:85:da:dc:1e:a1:40:b7:e6:2d:53:2b:ea:fc:
3a:09:10:2f:0a:b8:cc:9d:44:3a:f3:e7:e5:18:c4:69:71:1f:
00:a3:a2:dd:33:f6:df:eb:26:7b:8c:10:17:15:b5:4b:18:20:
08:a0:73:89:55:f0:4c:1d:0d:a2:30:2f:43:14:8f:87:6e:d3:
23:97:03:ee:9e:a8:b4:a5:55:0e:11:48:68:6f:09:7b:76:33:
06:b1:9b:4a:56:7a:2f:1f:8c:53:b1:cd:41:23:0f:e8:2e:2f:
25:92:96:1b:af:32:0b:7f:93:a1:8c:59:e7:3e:3d:4c:ac:a0:
0c:ea:91:fd:c9:e8:27:d5:7d:f4:eb:db:73:50:05:3b:09:21:
76:62:17:60:08:7b:f7:c7:24:35:e6:ff:5b:b2:73:94:b2:f7:
d7:84:62:89:5c:89:26:aa:b9:c4:18:9e:34:25:12:96:a8:0d:
e7:c6:f1:c2:6a:f6:52:ad:a1:e7:24:95:7e:a4:b4:45:4b:76:
4e:97:f2:6b:f0:21:d3:31:27:e9:6c:dd:ec:51:a9:06:6f:61:
05:b1:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:07 2025 by rpki-client