Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: /07akiK4B/huWcaoHBEkvvMG3sSxH0OfWM40vM6ESmM=
Subject key identifier: B4:3D:9B:46:A9:F3:C4:BB:D9:33:43:25:FA:21:EE:B5:0F:7F:7D:7D
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0198D6298CC6EC6859A0F7319E7B155E4037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 03DC
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: GUyEF1xxvbvgH05nCeznLFkzP4GBHOfyLa7/EdaFoiI=)
3: jmeiInx0nEsihwIdGGNm3usrgc0.roa (hash: HIHGyMxCWWiFOlHJLpUl7M1kqXVyovzv+xvL003KCq0=)
4: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8c:c6:ec:68:59:a0:f7:31:9e:7b:15:5e:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=b43d9b46a9f3c4bbd9334325fa21eeb50f7f7d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:ed:30:d0:54:16:b1:a5:a8:c8:56:93:b6:
c6:15:59:d4:eb:a4:f1:f4:ac:16:ac:a6:f4:1d:4f:
87:a5:09:f7:5a:c6:c5:d9:52:57:dd:f0:1d:40:a8:
cc:13:09:a4:31:e9:bf:d3:ad:4e:c3:e1:8e:e4:4c:
c4:76:26:3e:07:b3:fa:38:05:99:e3:76:79:db:74:
a9:3f:e5:db:4c:10:34:f1:6d:17:c2:03:e9:c1:49:
38:76:16:2d:7b:7b:7f:be:c9:6b:b5:10:8f:1c:63:
56:65:fa:ba:b7:61:38:75:ae:96:3b:22:3c:13:c0:
95:72:54:48:f9:16:7e:a5:85:38:da:f2:29:08:ec:
ae:5a:32:89:9a:b3:ab:47:1b:20:5a:ea:70:18:e6:
c3:c2:2d:0b:a8:da:44:2b:5b:8e:11:86:21:0a:4d:
29:0d:8f:86:dd:3f:d1:48:7c:96:40:4f:c9:12:31:
b4:8f:c8:28:48:cd:78:76:48:5f:0a:8c:83:88:65:
32:63:bb:87:6d:b3:bd:61:be:3a:60:83:d9:11:e8:
38:9c:7a:1f:4b:bc:18:6c:f2:36:4c:6f:62:a1:2e:
ce:56:ae:18:15:49:88:06:73:a0:b1:cd:9b:13:f2:
c6:96:b4:2d:0f:d8:a3:8d:61:bb:09:53:64:ab:75:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:9B:46:A9:F3:C4:BB:D9:33:43:25:FA:21:EE:B5:0F:7F:7D:7D
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:21:00:5c:0b:1d:52:d9:6b:90:fe:fa:11:f8:3f:1f:e8:94:
2f:74:ce:91:60:91:34:03:52:f6:67:42:b3:cc:49:ac:d2:12:
8c:8f:be:d4:ee:11:4c:91:e2:39:44:ae:7c:ab:89:a7:f7:7f:
c1:cd:cc:f9:03:f5:f4:0e:f1:50:4d:4b:4e:8f:77:bd:6f:8c:
4b:e8:e3:35:fe:d8:71:ce:2d:55:99:b3:9a:76:98:ee:19:24:
7a:80:c4:d6:4c:56:b1:0b:52:ed:63:a9:13:12:07:b4:01:1c:
31:db:bb:a9:bf:20:44:b3:0d:9d:53:0b:1c:7a:db:1b:c4:16:
48:97:ea:0b:fc:50:76:74:fc:89:58:76:7d:ce:af:27:31:96:
13:f2:69:0c:41:77:38:8e:1c:78:88:ab:01:10:56:1a:fb:ed:
74:14:09:29:87:5f:71:7e:be:66:19:af:1d:f4:c4:82:0d:3b:
c8:4f:19:77:3c:40:64:39:e4:5e:0f:43:77:43:92:1b:52:86:
8b:32:dc:96:0d:90:03:bf:9b:e7:4b:c3:74:eb:9a:fd:3f:36:
73:2f:07:2b:21:da:8a:81:a5:1d:02:c5:68:8d:96:98:bf:ad:
25:1b:1e:8a:d1:e2:a4:81:86:f3:d0:22:eb:b8:65:8e:85:f8:
1d:7d:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:23 2025 by rpki-client