Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: 3w+9wiPEPqHhLWA7yHg2z/wWW7x1Lv3Sz3I4WC5jIxE=
Subject key identifier: 43:CC:B7:C2:D5:3B:80:78:16:84:91:7B:2E:FE:C1:3D:5A:95:B4:E4
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 0197B6D79C1BE1DB9639E606976494557E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 32
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: 9N2bKJfHKhnlXLW4NZ9TUTAHF37hNCwUtdsEKwrlpTc=)
2: oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa (hash: C+won2ayhOZhVuYFZ85jDDGUEWPlmXvRmRnHCUNjIgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9c:1b:e1:db:96:39:e6:06:97:64:94:55:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=43ccb7c2d53b80781684917b2efec13d5a95b4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:95:ff:a9:e3:90:99:67:b0:46:4e:6c:e7:
ca:87:83:5e:d3:f0:e8:4b:01:f1:fc:bd:70:0a:51:
5c:bd:7b:2a:e9:c9:6b:66:54:89:d4:73:ca:9d:4b:
64:c0:f9:ee:ac:a6:07:bf:56:27:3e:a2:54:42:a8:
df:c2:21:e0:58:80:b1:94:4e:76:a5:7d:01:dc:b0:
ce:c6:3d:9a:c1:d8:87:b2:8c:ea:10:2e:e2:bd:0a:
da:49:55:e5:a1:38:28:31:ac:0e:eb:7a:87:d2:73:
c0:1b:79:f5:a4:5d:72:66:bc:27:4f:9e:7e:e4:07:
bd:f2:43:5b:7e:f8:c0:0b:a2:41:68:0f:ae:05:db:
cb:42:88:68:8f:3a:aa:6c:60:15:52:02:de:9c:09:
c5:b6:d0:da:9d:10:cc:1e:95:45:70:d2:7f:13:54:
9e:81:98:7b:30:79:87:ea:b1:e1:ca:f4:2b:47:43:
44:ce:cd:f4:f3:d9:b7:de:4c:a0:71:29:5a:ec:a5:
b8:e5:70:59:ff:52:ac:e1:f7:2c:20:9f:4c:69:b2:
3d:5c:63:15:30:f0:52:d5:6e:32:9e:a9:a3:6f:eb:
55:69:df:36:53:6b:a8:2b:32:cb:47:87:b9:3b:d3:
9a:a5:11:d3:3d:24:82:d9:68:47:a1:6d:c6:e8:f0:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:B7:C2:D5:3B:80:78:16:84:91:7B:2E:FE:C1:3D:5A:95:B4:E4
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:18:e7:f9:b5:5e:98:9a:3e:5e:4d:d5:54:8e:e2:b0:5b:c6:
f7:aa:a5:59:31:a1:06:cf:3c:f3:23:2f:1a:6b:f0:fc:d0:29:
15:11:5d:35:47:fb:71:49:d3:8e:42:57:22:a4:2d:50:b3:cc:
22:c7:cc:9f:e5:ee:1d:52:98:3d:15:2b:58:78:99:8a:ac:71:
27:2e:f7:9e:04:85:69:67:0b:8b:fc:13:11:95:0b:f9:dc:90:
e8:ba:62:c5:03:31:da:29:00:ab:a2:4f:50:8c:76:f8:77:89:
01:e3:e7:40:30:69:74:fb:69:65:fd:41:15:0f:d7:9d:4b:8f:
8a:d2:a8:f1:bd:38:7a:ae:56:c8:08:b8:3b:c1:b8:04:c8:03:
d8:79:b0:61:43:4f:3b:0d:65:2f:35:a4:71:9c:2f:ad:dc:0c:
55:8a:95:05:0e:6c:67:44:ee:0f:8c:94:0e:6f:41:dc:b5:19:
ad:e3:3e:0b:db:85:d9:73:94:91:fd:7b:6e:ad:ec:12:ff:00:
9c:cc:b8:0f:5a:02:ff:5d:7c:93:f8:b7:b0:26:3c:bd:2c:26:
6b:3a:55:72:21:7d:f0:7d:24:14:c5:c1:99:42:b5:55:79:25:
03:b8:ea:7a:3a:32:e3:86:ea:c3:b7:17:31:a6:e2:4f:67:87:
88:4d:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:10 2025 by rpki-client