Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: Mwyc9r4SMHXexrtklcwjeLLXlq9Zn2mZAhQAnCDqA7Y=
Subject key identifier: 5D:A6:8A:52:FC:21:01:85:E3:13:D7:6B:23:F4:81:46:36:8E:F6:80
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0197B7EA71E03EABB8DDD46196C34F65795C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: EWGnyOZdUSJo0FIBo9Rmv+X5SSHUWAwD9/cTlZgD8LU=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:71:e0:3e:ab:b8:dd:d4:61:96:c3:4f:65:79:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=5da68a52fc210185e313d76b23f48146368ef680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:8d:7a:99:81:25:de:e2:eb:74:9d:38:5b:
d0:4c:78:06:a0:72:17:93:43:de:74:08:d5:cf:7e:
2b:b2:89:39:20:c0:67:56:4d:47:ae:45:9d:b2:ea:
14:35:cb:e7:b8:99:c4:56:06:c6:76:fc:d3:53:45:
4e:ca:20:dd:8e:ac:7e:f5:14:64:ae:63:d0:76:5a:
4f:b0:03:c2:26:15:52:27:00:ff:cd:b0:ee:87:51:
c2:e6:95:e1:c9:59:e7:53:e6:b8:82:7c:73:40:c5:
87:18:85:2d:fd:ad:d0:92:f1:bb:50:8a:14:b3:7b:
63:20:f2:e6:b8:77:3c:42:1d:25:b8:1d:bc:3d:95:
ce:46:ee:d9:eb:16:21:c3:92:e1:09:ea:87:c6:6b:
43:88:43:24:b7:3e:3c:b4:d0:c1:f3:54:29:fb:82:
1a:df:1a:3d:39:39:ef:d4:4c:7f:82:ee:63:ba:b4:
99:14:4e:30:85:92:12:2a:07:c3:ac:ea:07:b0:6d:
f5:4b:c4:6d:c4:2a:f6:82:17:89:bb:b5:dc:5c:9c:
e6:0f:cf:e5:8d:b8:8f:a7:32:33:a1:96:21:e9:28:
b3:17:ee:c1:14:aa:1d:c6:95:f7:be:86:c7:51:b7:
6a:79:2a:7b:bd:1c:17:71:15:a3:31:48:09:c8:84:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:8A:52:FC:21:01:85:E3:13:D7:6B:23:F4:81:46:36:8E:F6:80
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:c6:40:39:e9:46:28:df:3c:e5:3d:2d:82:b4:8a:67:d9:
d1:b5:6b:1e:f4:a5:8e:53:12:05:cb:23:d1:f2:1d:0a:3e:b4:
97:18:bc:95:b8:32:0f:ca:2b:e0:4a:49:9d:ff:99:d8:74:c3:
b6:ff:3a:14:86:ce:5e:53:4b:6b:ff:c2:2c:73:fd:80:e0:e5:
45:b7:0e:d0:cb:41:7d:8f:d3:92:aa:29:ea:ac:f9:4b:21:c4:
94:b5:de:71:08:80:bf:40:a7:ac:98:34:43:bb:5b:b6:2b:7d:
6a:23:43:13:c6:0f:d3:c0:82:1b:ba:08:34:1d:1e:7b:9d:94:
70:67:97:f7:b1:af:ce:ee:92:53:4e:c0:53:d5:d6:34:36:d0:
db:a5:e7:1d:06:ac:db:f3:83:7f:fa:53:63:ca:7a:05:cc:3e:
a6:f0:14:b7:f6:46:aa:f6:00:44:19:66:83:4f:21:cd:a2:ea:
8a:b5:98:25:c7:54:3d:b0:07:89:bc:a1:4a:5d:0c:0b:9e:2f:
5e:d2:04:d9:c7:3d:63:7d:4b:fb:7d:e7:82:c8:30:40:ca:2b:
ca:02:51:7b:39:d4:33:65:3d:3e:8e:5b:bd:11:1d:3f:63:f4:
f4:7d:af:b3:29:1a:c0:00:0f:86:e9:b4:bf:0b:e9:cb:f2:d6:
03:c3:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:16 2025 by rpki-client