Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: 2d1Qbjt3yEHcxXt3NAjaxt9fmFKD/2Ym+amlYORv7Mg=
Subject key identifier: AD:CA:68:65:EE:40:1F:4E:10:E0:23:F8:B3:78:8E:74:0C:B8:2B:1A
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0198D5BC23B2E18B07128219F33FC0E2E702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0663
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: wmis7l+guJYVp2GVtRKBgayPXBB76j+3dRWO6F4lltA=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:b2:e1:8b:07:12:82:19:f3:3f:c0:e2:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=adca6865ee401f4e10e023f8b3788e740cb82b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:1a:89:ee:4e:af:e4:c8:c6:c2:1f:1e:87:
af:91:16:66:b7:b8:f2:60:85:cd:c5:7d:7e:0e:98:
75:ab:16:7f:04:f6:04:9a:56:9c:91:1e:57:ea:95:
25:61:d1:61:a2:d6:16:1a:f6:aa:4a:85:e5:61:6b:
8c:58:cf:34:58:c1:b7:bc:f3:a6:cc:04:db:83:c8:
9c:81:e3:c9:65:d1:26:42:52:6e:df:f5:8c:6f:dd:
a1:fe:23:83:dc:7b:b3:09:97:f7:9e:a9:00:1e:fc:
d9:e1:79:3e:61:91:d4:c3:de:bc:18:c5:b8:5a:84:
32:ff:6a:d3:69:f8:20:d8:77:85:98:d2:03:73:9c:
0a:76:26:45:a8:cc:26:07:dc:97:22:26:22:96:b1:
9d:39:a8:59:55:a1:37:d9:18:33:ad:fe:d2:0b:48:
57:84:1f:4d:59:7e:9b:0d:0d:ad:ce:67:a4:4d:7d:
5f:5c:8e:2f:40:d3:bd:03:cc:01:44:91:19:8a:a2:
7e:26:2f:a4:8d:29:5a:8b:27:71:1c:de:ab:c3:89:
6a:f2:5c:eb:cc:0c:15:7e:e5:52:c9:0c:f1:6d:dc:
3d:97:66:4f:d6:0f:63:65:0b:38:52:b1:ab:17:4f:
af:a5:c2:a7:de:94:37:67:a8:6f:10:8f:e2:50:82:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:68:65:EE:40:1F:4E:10:E0:23:F8:B3:78:8E:74:0C:B8:2B:1A
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0b:16:e5:35:2d:98:b5:fc:fb:7b:f0:f9:08:97:f4:cc:e8:
3e:83:aa:6a:be:64:36:2e:db:37:00:a9:d9:69:ab:8e:27:32:
7d:19:c9:8a:a8:8c:dd:dd:08:63:a1:43:db:cc:47:72:68:51:
26:4f:2c:da:e9:6e:3d:0d:0b:0f:23:be:c4:e9:f7:55:4c:c7:
f9:2d:19:b8:ee:29:6b:cd:17:f6:d4:47:cd:86:5f:a3:46:59:
fa:fe:76:ce:c1:e7:1c:e3:f6:57:e9:a5:cc:16:97:c4:37:29:
83:b3:d3:60:de:cf:a6:2a:aa:7f:58:45:7e:e5:30:89:d2:85:
da:67:2a:c9:74:74:a0:0e:78:bf:24:af:30:c0:9e:c6:76:a5:
7f:82:8e:08:6d:d0:41:9e:6d:92:f7:c6:24:67:c8:a8:02:18:
32:9e:44:30:af:fd:94:cd:5e:b7:45:90:36:85:f8:82:fa:ae:
8f:0a:7c:2b:c4:69:e6:1a:9c:9b:5e:ea:32:aa:8f:ca:ce:61:
98:a3:d6:85:1b:02:96:f5:27:81:bf:cc:12:a7:b1:dd:60:b1:
52:d0:eb:e8:e4:4e:32:5d:50:91:4f:85:32:8d:47:75:99:4d:
98:35:b4:04:a9:9d:e4:86:68:0d:3c:dc:0c:a8:00:6e:b9:7d:
a1:7e:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:40 2025 by rpki-client