Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: hZMoDKeBXAMaEScj3k+pP+fLrC65kwakncBfM9/KXh0=
Subject key identifier: BD:57:A5:16:8A:B4:92:75:CA:E4:91:75:B4:70:03:D5:83:76:DF:29
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0198D65F6FCFBCF5EB2A733E44697F062862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0B3F
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: 1I3fZQMOYGfxzFIarUCO/U1tspx/EuFx043CyrFqMrs=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6f:cf:bc:f5:eb:2a:73:3e:44:69:7f:06:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=bd57a5168ab49275cae49175b47003d58376df29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:dc:93:18:6a:2a:46:2f:fc:5c:44:9a:85:
4b:45:55:03:b0:ce:cc:98:1f:6d:b9:66:d7:05:52:
9d:68:73:9a:51:05:af:8e:5d:9c:01:b7:89:c5:65:
b2:5d:09:e3:5b:a3:32:d8:1a:fe:13:44:50:86:f6:
f7:54:5f:6d:07:48:89:5c:37:9f:0c:03:31:eb:1f:
3e:82:ff:66:b9:79:29:f2:24:94:87:b0:ea:3e:08:
8a:80:60:ce:57:2c:68:28:77:88:c0:1e:f0:a5:5b:
89:9b:6c:7c:50:78:6e:c6:e8:c1:b0:20:66:bd:af:
f5:30:da:50:43:2b:7a:17:3a:c5:d0:27:4e:28:ae:
df:1d:76:70:15:fe:db:89:eb:f8:fa:5c:33:7d:2a:
80:80:73:00:1c:96:1a:b1:97:42:d0:ec:c0:3e:e7:
a5:a8:df:b6:6e:49:eb:ea:cf:85:60:97:0f:77:4e:
6a:1b:63:0a:7b:12:81:ca:5a:ef:68:d0:ff:ca:4b:
a7:e7:7f:5d:14:89:a1:7a:39:02:a1:46:99:2f:3d:
f3:13:32:5e:8b:c9:9b:66:04:d1:66:22:b8:cd:d6:
b5:86:23:fe:e5:17:60:d0:25:70:72:48:71:52:1d:
65:6e:a3:06:b5:52:65:ef:bc:64:9d:9e:4f:0b:60:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:A5:16:8A:B4:92:75:CA:E4:91:75:B4:70:03:D5:83:76:DF:29
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:95:0f:be:6c:b5:8b:03:10:45:54:4f:6b:02:48:f0:d6:
d4:7a:33:60:7d:7e:53:09:d2:ba:e6:41:8e:59:f2:52:fe:35:
9d:c8:fd:48:70:34:e9:88:f7:3b:22:cb:85:aa:46:9c:7e:c9:
5a:8e:0d:fa:ab:cb:cd:ba:c7:23:3f:b6:00:4b:6c:ba:ae:a5:
bc:e9:f5:f2:5c:06:73:4f:ee:81:25:e9:47:01:7a:41:8d:32:
57:95:c1:d9:d0:e5:38:d6:b7:75:a4:73:a8:5f:42:b7:14:21:
8f:c9:32:fe:25:03:7c:bd:ab:2b:bd:75:98:d4:07:a7:de:09:
c7:2f:54:78:34:57:02:98:5a:6a:c6:6f:3f:b0:95:43:cf:50:
52:ce:83:55:bb:2b:fb:04:f5:be:0f:98:2a:6f:89:29:98:df:
fb:fa:db:9c:ae:7e:d9:20:16:40:6f:66:ed:ff:df:7e:bb:9e:
20:85:4b:08:e8:e9:04:70:a0:8f:fb:33:e3:a3:fc:6c:7f:17:
29:fd:cf:eb:c1:07:fa:4f:3d:15:40:44:19:40:85:28:e7:38:
99:b3:99:af:4a:d5:86:95:91:7a:c5:4a:ff:6b:16:da:73:f3:
dc:51:15:d9:8e:b2:43:79:83:24:d1:02:1a:a6:ec:31:cd:3d:
c4:d8:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:10 2025 by rpki-client