Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: c2c/WuV2WolafDl9OuptFJnChYMsofcENC+DHJOhJ9E=
Subject key identifier: C5:7B:98:F8:A9:67:55:73:82:2D:5D:18:3C:85:A9:77:FD:BC:19:51
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0197BBC75CE7842F2AE1C840AC5020ABB374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0D91
Signing time: Sun 29 Jun 2025 13:01:34 +0000
Manifest this update: Sun 29 Jun 2025 13:01:34 +0000
Manifest next update: Mon 30 Jun 2025 13:01:34 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: noc5jwp7smtXM/Pjp7t2RAZ7cczRyUoiXJ8PKpj/0oQ=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:5c:e7:84:2f:2a:e1:c8:40:ac:50:20:ab:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jun 29 13:01:34 2025 GMT
Not After : Jun 30 13:01:34 2025 GMT
Subject: CN=c57b98f8a9675573822d5d183c85a977fdbc1951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:ee:f5:eb:e3:63:e4:e3:f3:cc:11:a2:24:
9f:5a:f6:f0:78:47:1a:e0:84:21:c3:4f:be:07:a6:
53:9e:e5:4b:ff:c3:60:df:d8:1a:d5:e6:d2:18:9e:
a7:05:2e:33:28:cb:6f:31:f7:ca:8b:3c:15:f1:8c:
7a:54:18:76:67:5e:91:51:a2:e9:7c:dd:5b:0b:f3:
2f:4c:80:21:6a:c0:0a:c1:35:3d:6c:a4:d9:a8:c1:
e1:09:a7:bf:9b:b3:36:5d:f3:b1:75:6b:56:1c:60:
69:44:f4:0c:2a:86:6a:91:e1:95:53:3c:26:76:76:
78:be:bb:f5:5a:00:a8:7f:31:ba:79:02:50:6d:a1:
8c:4f:19:f5:eb:43:27:8c:52:4a:7b:ba:e5:66:40:
65:54:76:0b:fe:74:89:c6:33:3d:2c:9d:1a:8a:4e:
c5:41:0c:f1:eb:7e:68:a3:ce:85:69:de:e5:63:84:
56:33:7c:7f:b8:a7:b3:fd:9c:03:4f:5e:94:15:52:
58:a4:b7:ad:60:b7:ea:d2:d7:33:d7:4a:85:f9:2b:
01:69:14:e6:68:45:0e:86:48:57:a4:54:93:89:26:
af:0a:81:d6:f6:8f:ae:1a:71:24:39:14:fa:f6:81:
b9:25:4c:0d:da:5f:f6:f2:39:7d:6c:25:40:90:9a:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:98:F8:A9:67:55:73:82:2D:5D:18:3C:85:A9:77:FD:BC:19:51
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:88:bb:1d:24:84:05:da:ed:da:19:c6:22:d7:93:f6:b1:16:
0a:83:34:73:62:20:bb:02:f2:ea:7f:10:cb:d0:00:9c:a9:fb:
bc:7a:e7:41:d0:a1:f6:c4:a9:a7:c5:db:82:3b:62:8e:0e:87:
c4:4f:3a:e5:5b:cb:6c:7c:dd:25:88:d1:68:21:df:a4:21:91:
c6:b1:b8:8c:1e:ee:e7:68:c5:52:80:74:19:de:ca:28:ec:0e:
50:7f:0b:d7:30:1a:85:3b:fc:12:56:0d:36:0e:51:5f:b8:ae:
01:45:98:f2:67:9a:a7:39:c9:3b:6a:12:b7:87:01:a5:df:2a:
a5:2b:a9:40:ba:29:e4:16:2c:d0:40:04:28:f9:da:a1:ae:3c:
13:b9:94:0e:93:8e:7d:11:5b:c0:99:ef:4c:b9:97:79:05:66:
7b:6a:d6:3e:32:aa:47:0c:92:ad:fb:06:3f:e4:a6:d2:f6:a1:
a5:06:04:25:29:0b:34:e9:9c:db:2b:b5:1a:d4:8c:81:56:a6:
fc:44:a4:ec:38:74:8b:43:b2:00:f3:df:31:a2:b4:ac:85:c5:
25:d3:14:2b:51:5d:6b:a7:43:1e:8f:4f:c5:c0:b8:aa:06:23:
f7:13:e9:7f:12:d4:f9:ac:02:d1:6e:84:0d:0b:67:20:ab:cb:
73:7d:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:53 2025 by rpki-client