Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: w0aDvE5sj2TDsQ29/NCi+vUqE6lroBoScUkx6VfAmqU=
Subject key identifier: BC:7E:DB:B0:36:0E:6F:F6:DF:9C:64:7B:5F:C9:3B:B7:10:19:B1:1F
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 0198D5F1AE32A96BFCA536F7C3F1E1C7BF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 11E9
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: yYCBDbZ/26AZNDt6Q0GOfoLqeEXYGy2TwNpK4Rtxw3o=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ae:32:a9:6b:fc:a5:36:f7:c3:f1:e1:c7:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=bc7edbb0360e6ff6df9c647b5fc93bb71019b11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:3a:bc:78:d0:9c:72:04:df:cc:13:2c:8d:
de:5c:ca:14:7c:f8:56:09:14:5a:92:02:f0:9b:7d:
67:c3:a6:41:56:24:89:c9:d5:13:b3:8e:3c:af:64:
2d:1a:55:3f:66:4f:5d:de:6f:5d:33:f6:b7:53:79:
26:48:08:6c:35:cf:77:cb:ec:8e:20:fd:cf:1f:af:
35:14:70:2e:0b:98:be:31:75:6f:a3:27:3c:dd:63:
ef:17:13:2f:f8:f2:6a:a1:fb:04:db:20:f3:b6:7e:
34:69:e0:26:35:dd:00:55:d9:dd:26:00:fd:e6:ab:
16:79:d2:0d:99:77:5e:30:fb:37:51:83:dc:a9:30:
e3:bf:a7:54:4e:a7:22:07:67:ff:22:ad:3d:a3:e7:
05:5c:03:f6:1d:3b:9c:ac:9c:52:9e:d5:cd:17:da:
70:d2:3e:db:9a:16:a1:15:d7:a1:71:37:ab:54:30:
95:83:31:7a:1f:6d:5f:4b:00:a6:74:5d:6c:0d:f1:
90:6c:24:ce:7b:71:7e:40:73:de:bd:74:d9:da:78:
03:3e:56:c8:c1:ed:5c:5f:8f:fb:5a:e6:6f:55:06:
7c:c6:58:f9:09:79:67:c7:43:c2:0a:b7:8f:cb:31:
91:c4:84:84:a1:4e:57:b7:19:05:28:d9:4b:f5:fe:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7E:DB:B0:36:0E:6F:F6:DF:9C:64:7B:5F:C9:3B:B7:10:19:B1:1F
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:45:25:3b:1d:0c:01:d5:ea:6e:40:e1:2c:5f:c0:6b:72:
15:03:bc:9c:be:2a:26:4b:a6:e2:aa:58:3c:2a:57:da:87:5c:
ed:e8:0d:44:78:fe:68:4d:25:36:b8:f8:65:b6:1c:ab:3b:e7:
a0:38:8f:42:99:1a:fc:53:82:9d:0c:38:8a:a5:30:84:71:36:
4c:16:24:b7:69:a7:c7:78:65:d0:e3:a3:df:87:86:a0:f9:09:
7a:cd:b3:47:08:f0:26:a1:e4:9c:03:a5:a2:76:24:58:5e:8e:
3b:28:73:3a:11:1b:a7:79:6e:75:18:df:0c:1a:f5:0b:6f:df:
db:38:5e:8f:55:93:30:ee:71:01:11:88:22:85:f0:37:73:55:
8d:2d:25:03:9a:f1:45:20:a8:25:73:85:e7:02:c6:10:db:15:
88:d1:ba:3d:e1:eb:16:40:57:e9:24:2f:25:46:9b:af:9c:d3:
27:23:18:11:41:c8:7a:b1:12:30:c9:4d:15:07:19:b2:e9:32:
b7:8f:78:d1:06:e5:f1:89:21:f1:2b:4d:39:5a:99:04:83:df:
b1:39:46:a8:71:99:07:5e:8e:d1:7e:c1:88:93:1c:ec:63:b9:
82:7a:93:ce:4d:b4:23:b2:a4:c6:02:60:8c:c3:19:f6:f4:c3:
13:f4:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:14 2025 by rpki-client