Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: l30ciAnrg5whS8jLVpL4GJn2SJ18SgnMhBA755C48l4=
Subject key identifier: 21:BE:33:53:41:87:7C:B7:E2:F2:F3:C1:6A:49:C4:5A:33:C1:D0:93
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 0198D5BC0BB0DE6B11E76E1233E54D12A43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: wgBaH8powYBtTdWZkTUTERvrkgI/xGdZfbAw519/P90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0b:b0:de:6b:11:e7:6e:12:33:e5:4d:12:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=21be335341877cb7e2f2f3c16a49c45a33c1d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:40:06:a3:76:b6:47:98:41:85:0a:89:c1:
df:67:a7:02:1b:b1:e5:08:2d:13:02:b9:82:80:e7:
c1:e7:ab:6a:82:b6:c9:89:15:1f:59:a0:39:6d:3f:
32:62:5b:c7:c3:37:9c:ec:99:c8:37:14:f1:e2:89:
f1:1d:5b:5b:b1:44:d9:b3:6b:14:5e:70:f1:e1:6f:
36:c5:a4:02:fc:04:b1:48:81:3f:61:0f:c0:e2:64:
bc:6d:c5:f1:8c:33:a8:bf:eb:35:ba:e3:a4:a7:c5:
ed:7d:28:39:f2:e6:f6:54:01:2c:d9:9c:e6:f5:1e:
fa:97:b4:ee:6a:2e:6f:3d:0a:aa:16:66:ed:bc:8d:
b7:12:4d:71:71:9d:97:e0:a0:c8:cd:c4:8c:1a:48:
98:d5:bf:e8:1d:ec:c7:a7:ac:78:c0:28:d3:14:24:
e9:54:78:52:4b:a7:55:3b:e4:93:aa:4e:cc:f1:1a:
1d:53:72:3d:31:dd:ef:9d:70:42:36:76:d9:77:7c:
ca:90:33:57:91:f5:ac:9d:48:70:29:aa:61:0e:45:
d8:70:03:4d:6e:56:c3:23:ab:7c:04:5c:67:f0:41:
7b:b2:9c:5d:bc:8c:ef:f2:ab:7f:4b:58:00:d7:0f:
08:58:ce:80:d5:d5:8d:de:07:75:59:fb:d9:9b:71:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:33:53:41:87:7C:B7:E2:F2:F3:C1:6A:49:C4:5A:33:C1:D0:93
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:ea:f4:0c:5a:9b:91:06:20:55:6c:d2:f8:21:0f:72:15:
11:0d:78:ee:3a:11:55:9f:ab:4f:34:af:64:a7:a4:33:de:db:
90:44:9f:c8:80:46:7b:63:28:1a:b6:cd:a1:33:e5:0c:29:9d:
68:3e:4c:2c:11:c2:24:96:fe:ba:83:96:4c:98:77:64:a0:7f:
e1:b3:9f:f2:82:d1:e0:1f:65:1c:69:62:7a:d1:9b:9e:37:e6:
37:b0:ef:64:dc:c7:3b:e9:b0:b4:fa:22:91:d9:df:4d:1e:41:
be:e2:a0:38:23:51:8d:1f:43:c2:d3:d8:98:d3:00:9d:43:a6:
eb:a5:4d:68:ea:49:3d:dc:5b:f3:ef:2e:c1:c6:ec:79:b3:d3:
88:75:3b:b8:57:98:59:4c:d4:9b:14:1f:8d:f9:4f:38:53:22:
e5:b0:88:c2:d8:0f:35:6c:dc:97:e4:92:96:25:31:33:6d:00:
96:1b:c6:51:1a:b6:a3:61:18:8c:c9:ef:8c:55:7d:cb:d8:b2:
44:01:0a:b4:09:e3:00:f8:c3:54:77:06:11:33:6f:f0:06:3c:
ee:35:4b:7f:9b:dd:d1:4f:4d:60:b1:62:8e:b7:5f:12:5c:c8:
c3:1d:f6:9d:f5:78:4f:c7:09:77:93:37:3f:99:8b:42:7f:ec:
1d:07:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:04 2025 by rpki-client