Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File: x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier: 4MmhY3ATd5piyOQNv55u+DJGbT0ONHH24Pgaka2FhM4=
Subject key identifier: 1E:13:7B:A5:80:AC:0B:D2:F2:60:76:E6:AF:04:05:99:2B:D9:11:62
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: 0197CACC6724DCC670DDBB13BF8E75388488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number: 0BE7
Signing time: Wed 02 Jul 2025 11:01:22 +0000
Manifest this update: Wed 02 Jul 2025 11:01:22 +0000
Manifest next update: Thu 03 Jul 2025 11:01:22 +0000
Files and hashes: 1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: AWp1096SBRAUItA2cuQH+oZNHmlkp4PKePX2qZuWpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:67:24:dc:c6:70:dd:bb:13:bf:8e:75:38:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: Jul 2 11:01:22 2025 GMT
Not After : Jul 3 11:01:22 2025 GMT
Subject: CN=1e137ba580ac0bd2f26076e6af0405992bd91162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:fb:5b:fb:ec:db:46:cc:69:ce:ef:5d:29:
78:86:d7:b2:a0:ce:2f:2b:36:06:5e:9a:e2:70:61:
82:c8:d0:8b:4f:c4:d9:44:4d:44:ae:6f:f9:28:d9:
00:98:43:38:78:59:f2:2d:a9:c5:0c:b6:90:2d:3d:
1c:15:b3:d8:d4:e2:9d:35:b9:9b:86:10:e5:ae:cd:
74:25:54:c5:ed:e5:74:28:d0:82:0d:4e:05:20:54:
3a:56:13:27:00:38:77:5b:e1:94:b6:4a:57:9b:31:
72:a6:84:f2:f9:c1:a9:2e:03:1d:27:51:ad:68:e5:
28:c2:e1:53:c7:f6:55:70:6c:de:7c:89:dd:20:a0:
ad:38:4f:01:fc:66:4a:51:1d:fa:5c:e9:0a:a5:61:
4b:18:d2:28:cd:be:3a:a6:e5:41:3a:e3:e4:e0:14:
87:22:af:bb:1a:4b:34:d0:92:4b:65:88:d3:35:4a:
d3:4d:1b:43:bb:ac:82:c4:ad:3f:96:6e:aa:f1:3f:
e5:a8:a1:78:cc:e4:73:b3:01:e8:1e:7b:5c:88:0c:
7e:be:68:d1:79:c2:e6:87:17:89:01:2a:0c:36:cd:
ac:65:31:05:d8:df:4f:fa:a5:3f:c6:d4:68:fa:49:
80:a1:02:e7:f0:d3:16:4e:20:4b:2c:63:81:ee:d0:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:13:7B:A5:80:AC:0B:D2:F2:60:76:E6:AF:04:05:99:2B:D9:11:62
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6f:9a:50:0b:f4:53:05:5b:f4:d8:39:fc:cf:a6:b2:05:3b:
e8:60:1e:69:c4:8e:da:bb:01:a1:1b:eb:d7:7d:cc:e5:87:2f:
e3:9c:9b:78:27:9d:e6:f6:f8:ce:2d:5c:e5:2a:e1:57:c4:c0:
91:7e:11:df:43:38:26:14:bd:68:e5:46:11:aa:d9:1a:8d:c5:
4e:e3:23:9b:11:1a:57:aa:fc:76:84:dd:e2:d4:20:a6:98:03:
7e:ee:8f:b3:38:c5:96:b1:1c:93:16:b4:bf:1d:26:c9:54:e6:
ea:bf:c9:3e:3b:c1:17:18:62:91:01:6f:99:76:62:01:78:e5:
a9:5b:07:25:0c:72:c8:ed:d6:a2:39:9e:ff:29:33:03:f5:26:
89:6f:c6:37:0b:6e:ca:c3:a2:8d:cf:eb:2d:ad:4c:b1:e6:ab:
4e:c2:21:a2:ab:a1:31:dd:b9:db:4c:a4:da:8b:f2:51:fe:39:
1f:1d:f4:ad:7e:ad:3d:59:fa:ef:13:80:c9:11:f9:10:86:12:
ee:76:da:0c:0d:c3:5f:30:1d:33:cb:1d:93:0c:ce:9b:e1:a4:
a7:1a:ef:b5:87:45:c3:21:47:09:8a:af:17:f9:de:12:6e:c9:
23:a6:02:8a:1a:88:f3:0b:70:ed:c5:55:42:02:a7:37:7d:60:
31:4e:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:52:50 2025 by rpki-client