Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: AU+7/TKYi+/XTGTGANO0p2qZzpWZLjZzi3o8aT4jjcw=
Subject key identifier: A9:61:E2:9E:98:87:80:CC:AF:58:00:A4:61:EF:01:9E:45:EA:D6:23
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0197C72630C8D0B02FDF06A881BDBA35574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0349
Signing time: Tue 01 Jul 2025 18:00:58 +0000
Manifest this update: Tue 01 Jul 2025 18:00:58 +0000
Manifest next update: Wed 02 Jul 2025 18:00:58 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: IJnoSSxuCGpH5HOUD6o0rWYL0kiiEd2GOJD5iq5cp2c=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:30:c8:d0:b0:2f:df:06:a8:81:bd:ba:35:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jul 1 18:00:58 2025 GMT
Not After : Jul 2 18:00:58 2025 GMT
Subject: CN=a961e29e988780ccaf5800a461ef019e45ead623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:32:20:e9:3b:03:ea:87:2f:71:5b:4c:67:
43:ad:84:c0:2d:11:04:3b:c8:29:7c:92:59:15:d9:
ce:59:2f:89:71:10:19:cb:9c:83:d1:f0:3b:04:2d:
06:c1:44:b4:4a:f3:19:48:87:3e:cf:8f:d8:3e:d9:
e6:07:f6:3a:67:db:90:a1:28:8e:31:e5:08:7e:b4:
32:84:09:8b:16:fb:32:5c:b0:a7:c0:b8:f9:58:22:
e9:47:23:28:03:37:93:92:b1:93:c9:54:c3:99:5e:
8d:97:be:a3:dc:09:4b:5f:0f:ec:d9:7d:dd:29:c4:
b7:8d:48:29:a2:4a:82:f5:79:11:bf:89:e7:13:92:
57:af:83:9e:5f:8e:55:6c:05:97:ee:04:b1:64:bd:
08:a0:66:26:a4:b9:65:f2:34:c9:f6:e1:48:67:6f:
17:a7:89:e5:11:b3:09:ab:99:da:c4:5a:e1:a1:c4:
bf:42:3d:07:e6:61:d8:a0:0b:71:ff:9e:23:3f:ab:
50:64:1c:71:48:3a:b8:f9:9e:62:a7:6c:71:ba:97:
aa:ac:6f:a7:77:c9:09:94:56:f6:38:64:3d:35:e9:
07:39:82:8e:b2:2e:25:08:ce:69:e2:93:77:fd:71:
fa:c8:7b:7b:48:66:00:06:ca:4d:14:80:c0:82:ba:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:E2:9E:98:87:80:CC:AF:58:00:A4:61:EF:01:9E:45:EA:D6:23
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:de:e2:f6:b3:27:3d:75:2b:9e:b9:a4:d8:5b:e5:13:6a:
c1:c0:40:df:c0:08:e1:78:56:9d:ab:23:b4:c2:29:2b:7e:b5:
b5:ac:c9:41:92:96:b8:6d:1c:32:bf:12:fe:7d:ec:75:6e:6d:
ea:d9:75:17:5f:6a:81:98:c5:c7:e3:be:71:45:47:c0:79:e9:
a5:91:2c:ac:4b:17:9d:49:e7:6e:f2:97:40:28:57:65:cb:30:
b5:47:c8:02:9e:58:42:dd:81:25:d3:c7:35:aa:1f:34:ba:bd:
21:c2:80:48:3c:00:4e:f3:3f:40:a4:c3:f3:a6:2f:b7:1f:67:
4c:b1:a3:3c:0e:2f:6e:d3:c7:d5:ac:a1:8d:93:7b:a7:26:36:
f2:6e:be:50:34:b3:69:02:f2:41:f7:d3:c1:fd:9c:08:e2:9b:
21:b1:15:3d:fe:dd:f7:1c:cd:7c:48:5f:20:98:54:8b:53:cf:
e0:05:e7:2a:fc:95:b1:e4:8f:49:56:04:93:2a:61:12:ad:b0:
82:0f:ec:7b:48:bf:84:49:3e:de:c8:3b:40:aa:17:a2:bc:6c:
3c:17:94:22:80:7b:82:fd:1d:06:2a:79:3d:ce:31:88:bd:86:
bd:37:2e:4a:ed:74:73:61:c6:ca:72:a5:08:d1:3c:4c:60:15:
15:ab:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:21 2025 by rpki-client