Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: hU29sPOqaJBETSpBLiOUVneolglKDyBKQyi7TzgBjIg=
Subject key identifier: 94:51:5D:4C:EB:7F:AA:F2:CF:EE:AB:E0:64:B8:71:EB:D0:16:00:9E
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 0198D7060D7344254B562F11C9F6B817AF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 0120
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: hyIvtk9rkJrBjgN+oxOiQAAbPUU/00EdSS/qz0Dso94=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0d:73:44:25:4b:56:2f:11:c9:f6:b8:17:af:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=94515d4ceb7faaf2cfeeabe064b871ebd016009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:0e:34:5c:e0:3c:d6:f1:38:31:88:02:36:
51:2d:37:23:07:0c:90:a8:43:c7:63:ab:5b:64:24:
49:02:f6:b3:93:8a:39:07:a3:88:fb:75:8b:8f:7a:
a3:07:9b:80:7f:18:40:e4:f9:e8:18:fc:e9:5b:2b:
60:6a:b6:6d:ee:27:7b:34:16:ce:01:92:be:ee:0d:
6c:f1:bf:c3:75:8c:c7:8f:1e:de:3b:2b:82:5d:00:
43:c6:c8:6e:76:91:41:52:2f:da:dd:f1:ff:9b:6b:
13:b3:4d:99:8b:63:21:69:bb:ac:8a:a4:5c:7e:92:
6c:6b:cf:0a:df:e7:0e:1e:80:f5:c4:21:93:fb:8a:
16:e4:6f:42:e9:77:ce:4a:4f:fd:7c:36:bd:e7:d4:
19:f6:9d:a3:cb:6e:62:12:e6:9b:ac:3e:94:4a:97:
b4:42:c0:d2:07:7c:05:4e:fd:fa:87:ec:9d:63:29:
30:59:4b:b7:47:f1:eb:4d:f7:01:83:47:b5:67:0d:
ed:1f:65:43:dd:54:23:eb:a6:04:b8:e4:a1:32:f8:
0a:cf:f9:c8:bf:2d:02:fa:a8:66:64:ba:9e:cb:72:
25:b5:03:58:78:4d:7c:7e:8d:82:ad:63:f7:da:91:
13:7c:c8:10:f8:64:d7:5b:9e:5d:9c:d8:d9:6e:d6:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:5D:4C:EB:7F:AA:F2:CF:EE:AB:E0:64:B8:71:EB:D0:16:00:9E
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f8:0c:d6:bc:1c:9b:de:df:21:87:42:96:79:99:25:a0:37:
28:8b:0a:73:2a:c5:ca:2d:f2:52:d4:54:1b:d4:b7:ec:c7:7d:
68:24:d2:da:2d:d1:c9:09:e3:21:8f:a9:1d:c5:eb:13:0c:c1:
93:a4:f1:0a:07:52:43:73:93:f7:9e:92:7d:e1:bd:6f:cc:54:
d8:30:55:7a:74:0f:b6:c6:4f:e0:cc:08:b5:30:20:8d:60:d8:
15:c8:32:c5:42:ce:88:c6:99:a3:78:a0:be:b7:24:93:01:84:
48:88:51:1e:58:bc:76:ae:2c:3a:99:86:a2:86:33:dc:77:05:
4c:0b:61:e7:67:bc:ef:fb:47:6d:03:1e:56:86:a5:8f:85:b2:
44:ca:6e:2d:44:e6:68:6e:d0:37:ca:01:1b:d4:bf:d2:c5:93:
02:1c:fd:3f:dd:53:1e:2e:1a:ec:37:c1:35:08:ea:4a:5b:6e:
79:7e:6b:f1:ff:1a:a8:88:5c:db:59:10:05:a5:7d:9d:f0:a7:
0b:20:7a:c8:26:fe:8e:7e:e4:cf:68:f2:ec:6b:ff:58:5f:ac:
5a:a1:3b:48:b7:2e:7f:06:94:7f:e3:c0:65:aa:b3:ce:25:25:
e4:55:0b:4e:1e:be:52:5d:f8:a1:54:31:e1:78:e5:b5:80:c0:
9d:1b:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:32 2025 by rpki-client