Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: ifhc92eiil6z7pPeUXC+35kjzaEpkkspOYEqmNdKNVQ=
Subject key identifier: 81:E0:03:80:25:80:D0:D8:B8:98:73:41:48:C8:65:86:42:3E:C8:FB
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0197E1F8DF793B9C8DAB4D8D298F18EF85FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 154E
Signing time: Sun 06 Jul 2025 23:01:13 +0000
Manifest this update: Sun 06 Jul 2025 23:01:13 +0000
Manifest next update: Mon 07 Jul 2025 23:01:13 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: 6wuMGANcWuNSMAASX4oUb5YSRxW2xP+vsIutS645yf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 22:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:f8:df:79:3b:9c:8d:ab:4d:8d:29:8f:18:ef:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Jul 6 23:01:13 2025 GMT
Not After : Jul 7 23:01:13 2025 GMT
Subject: CN=81e003802580d0d8b898734148c86586423ec8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:5f:19:d3:54:66:3b:f9:1a:b0:11:c7:bf:
dd:f9:6d:fc:2e:84:d0:92:cc:05:6c:63:b8:82:8e:
01:65:d6:7c:3d:d1:ed:07:02:b1:59:12:26:ba:11:
cc:55:32:01:02:8a:26:de:f1:10:e7:d0:aa:8d:4d:
ca:28:81:33:fe:e8:19:ad:de:d0:33:7f:66:a0:66:
a9:78:54:3f:ed:f6:70:d7:ef:af:97:61:db:cc:e5:
a6:23:4c:55:9d:41:9b:ff:bf:34:c1:b6:b5:65:13:
4b:0a:6b:75:de:88:9f:7f:d8:23:6a:7f:a5:33:fa:
7e:d3:a1:99:92:3d:cf:0c:3e:f0:d4:f5:a1:68:71:
df:f2:d8:b4:b6:92:f8:b3:0f:d3:ce:46:d1:b3:8d:
23:24:0c:16:6d:bd:1f:fd:39:cf:73:ad:30:42:11:
aa:5a:56:05:ae:6f:9a:86:c2:8e:b3:61:15:23:49:
83:c3:13:ac:c2:54:30:89:60:03:24:2b:39:be:0b:
ad:86:7c:86:90:e8:5f:e5:67:5d:76:6c:dd:09:7d:
2b:6e:ff:fc:bc:ee:d7:07:13:9f:db:8c:ad:82:30:
8f:18:b1:e3:e5:cd:04:a2:4d:14:d5:04:e2:ac:4f:
a9:1f:97:0a:3a:9f:84:77:1a:8b:72:86:57:cf:e3:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:03:80:25:80:D0:D8:B8:98:73:41:48:C8:65:86:42:3E:C8:FB
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:1e:fc:84:b2:a5:23:e1:4b:c0:29:d1:10:c1:5a:21:98:
90:8c:9c:63:97:a5:23:27:c1:0f:ad:85:af:36:82:28:fa:da:
9b:33:da:6f:11:e7:db:de:d6:31:24:49:e5:64:d2:0e:61:d0:
1e:ce:3d:b0:9d:d9:3f:da:34:d0:05:b1:01:13:6f:33:e4:01:
3c:a2:cc:0f:4b:74:e0:36:dc:e4:f4:13:6f:51:8a:d5:a8:b4:
fd:cd:79:fb:2a:1c:ed:68:02:1a:38:d1:66:53:86:47:18:41:
41:34:bc:87:a4:6f:35:ab:ee:23:a0:c9:e3:2c:0e:91:30:47:
e1:90:2c:a3:25:72:3b:16:2d:52:7d:f1:32:da:55:5a:b8:a4:
4d:76:aa:3b:2d:37:a0:fd:40:91:b2:20:d2:0b:5b:fb:b6:3e:
21:23:53:f3:fc:3e:a0:81:e3:2a:fb:dc:e6:c7:ac:84:44:91:
ff:54:a8:84:47:fd:c4:75:ca:1e:e9:e6:c5:dc:da:24:b6:80:
6f:7d:67:91:b0:53:a5:b3:ef:9a:ac:2a:96:50:4b:05:20:98:
f6:26:c2:a0:51:07:66:f1:7c:fb:a2:a7:0d:13:f3:86:02:2c:
92:33:83:06:2d:b1:cd:7b:a8:a6:65:ff:77:36:e6:e7:ff:97:
23:ee:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 01:42:52 2025 by rpki-client