Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: nSI9JsSbb4DzaGTjr5WHF7PfjlkyupaflXNo3tfqApo=
Subject key identifier: 5E:77:5D:EF:C4:53:BF:C3:5B:1F:BD:FC:C7:CA:B6:6A:8D:CC:64:CA
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0197B6A094622BE2DB654188AEC5776E9BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0AAA
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: laOrk3htMwDy5koKNiYM78Hmsl/dm8wVg7rv3k4pS9w=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:94:62:2b:e2:db:65:41:88:ae:c5:77:6e:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=5e775defc453bfc35b1fbdfcc7cab66a8dcc64ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:e4:01:3c:4f:fd:b9:95:ac:60:bf:73:a4:
37:84:0c:8d:70:db:99:36:cf:57:f2:55:d3:7b:d7:
6d:12:77:09:c7:d5:ab:ef:b6:08:85:ec:e1:0f:f9:
e1:a5:e4:52:2b:09:47:5e:e5:b7:a7:55:a7:1e:85:
b0:79:84:e3:18:11:3f:24:77:e4:5d:09:f5:4f:c9:
10:43:d7:40:0c:df:0e:af:a5:d6:ca:d7:72:e3:37:
eb:94:36:15:39:80:b9:68:a4:76:78:62:8b:74:71:
81:1f:85:b3:69:63:43:bd:43:df:7a:02:35:c8:d4:
9f:6f:81:44:89:39:88:3b:23:7c:67:04:b4:80:d1:
f2:47:58:8f:3b:9c:ad:ee:32:9f:bb:a0:f4:bb:dc:
cd:d4:5a:bd:32:f9:63:17:a8:45:3e:47:ef:d0:ff:
6b:3b:48:12:8a:8f:51:34:68:9f:72:f1:4b:67:26:
b0:4d:8d:44:f7:89:cb:04:71:89:3d:99:df:44:8f:
2f:4c:f0:72:a0:bf:0c:e1:d0:a7:80:1d:21:88:b4:
dc:4d:8e:1b:0f:03:55:26:f0:9c:1d:48:df:0b:45:
ef:d9:ca:50:22:15:6a:5d:38:b9:04:71:ce:00:d7:
b8:47:1e:05:4c:f3:3f:97:bb:ea:e3:15:7b:6c:8b:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:5D:EF:C4:53:BF:C3:5B:1F:BD:FC:C7:CA:B6:6A:8D:CC:64:CA
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:8c:95:b2:da:83:52:ea:c1:62:e0:1f:f1:21:ba:e7:04:
16:c3:b7:5d:d5:f6:1c:e0:59:e3:d1:0e:4c:f0:5d:bd:72:40:
3d:85:24:38:47:f8:ff:d7:41:f2:4a:51:67:fd:fb:73:95:b9:
f1:04:4c:2a:d2:5a:a8:8e:75:e9:05:06:8b:a3:8e:55:70:6d:
e0:e9:b7:aa:b1:34:4f:1a:1e:de:92:9f:f0:1c:7c:76:db:e5:
ee:fe:5d:7e:13:8b:e2:b9:e0:55:bc:0c:a6:d1:15:38:5b:71:
8f:04:e9:ae:30:c5:e4:8d:b3:e3:83:cc:00:dd:be:24:e9:2c:
9d:94:9a:5c:f7:2f:af:a6:cf:8f:95:c3:f2:f9:2c:81:04:0b:
7f:b2:d0:f6:d8:aa:d5:37:89:f0:0f:60:20:30:d7:1d:47:aa:
a2:17:0f:d4:16:e2:0a:1c:fc:a1:7f:ae:89:cf:41:0d:72:ca:
ef:3d:16:fa:67:c8:ec:84:ea:3d:55:ba:4d:7d:93:3b:1d:8e:
5a:82:d9:57:57:ed:96:5c:b5:92:43:34:78:45:45:97:ea:9f:
69:9f:06:75:08:d5:83:45:63:b1:46:2a:34:00:7e:98:08:4b:
3a:2f:aa:fe:22:c6:c3:ff:29:10:11:e2:98:17:34:f0:4e:1f:
d1:99:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:57 2025 by rpki-client