Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: V7NFkAxO8UdJ+5Rnwsmc6Mx5a2wEBTw8Tjk1lje6Efo=
Subject key identifier: CA:BE:D3:B6:0F:44:21:18:71:6D:DF:B5:77:5F:9C:D4:2B:BC:6B:1E
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 0197B632A9D4FD94C6ACEBD24782E5F6002A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1154
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: X6Fm/XX8pexxfB2N1ToqI46VWnGJbo6dEOXXgzqv0bA=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a9:d4:fd:94:c6:ac:eb:d2:47:82:e5:f6:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=cabed3b60f442118716ddfb5775f9cd42bbc6b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:8b:f7:16:fe:a1:fb:9d:f6:22:94:05:0c:
0c:09:45:04:ff:88:69:c0:9e:f4:04:35:7c:c5:df:
f6:50:6c:5c:08:1a:51:ad:b6:2e:5c:af:94:92:b0:
24:ef:af:b7:9a:45:1c:a9:6f:a5:83:e2:ab:4e:e1:
5e:3d:43:7e:00:1d:89:42:c6:7b:c7:9c:8e:cf:ec:
17:47:4d:da:9f:df:f0:64:67:14:f2:b6:a5:b7:41:
54:08:22:a1:be:9e:21:4d:3e:ab:fe:7f:90:fc:75:
4d:84:88:ca:fb:f4:ef:de:c4:37:2b:d3:b9:d3:26:
ec:11:7e:47:e0:bc:66:ec:20:62:bf:5c:89:aa:1b:
70:95:32:49:48:5d:17:35:91:e7:78:ec:35:39:a0:
e0:4f:1c:1f:f6:af:83:04:f8:9b:39:c7:13:fb:8e:
61:23:1c:17:27:18:fa:f0:f9:78:c5:d3:19:83:e4:
fd:8b:81:26:87:46:d3:31:18:87:e8:bc:ca:ce:33:
a9:9f:2b:95:95:41:0f:99:6e:1d:f9:64:dc:f1:31:
d2:a5:b0:5c:dd:8d:4d:a5:51:e2:94:0c:70:1b:55:
f2:d1:59:6e:21:c2:9e:65:9f:03:5d:28:f6:df:47:
e0:1e:3d:3b:b5:e9:1d:c9:5e:0f:63:04:5c:37:7c:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:D3:B6:0F:44:21:18:71:6D:DF:B5:77:5F:9C:D4:2B:BC:6B:1E
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:b5:71:85:2c:d2:fa:1a:32:81:6f:b0:23:d4:74:c7:6b:
83:7f:ab:25:ec:e9:e6:0f:89:47:22:77:12:82:cb:93:e5:1d:
59:a6:b1:e8:a8:65:31:09:7c:d8:ec:c6:a0:57:0d:93:6f:6c:
78:16:1f:20:2e:7a:6c:a2:e3:5e:af:1d:58:8f:e6:a4:e5:b2:
50:9a:a6:f5:92:79:f0:77:3e:09:a4:0c:fb:35:95:f5:2a:3e:
e5:61:dd:81:fa:82:50:b6:09:a2:4f:37:39:d5:50:23:bf:7b:
be:a9:05:19:35:65:87:6e:e3:79:d8:f7:31:f2:9a:f5:44:84:
d1:7e:1f:89:28:31:60:d2:5f:b3:d4:e8:9e:13:86:ef:a9:d8:
7e:f4:9b:15:bd:c6:7e:38:a0:7b:59:c1:f2:96:b4:69:8f:01:
6b:21:6b:a8:9f:c0:b0:64:23:f9:3b:f2:37:48:2b:9e:ed:08:
f4:8b:70:c6:a6:d7:d1:a5:b9:2d:9a:38:9c:a8:c9:c4:2e:5f:
38:ba:5d:97:33:8e:78:6b:84:32:c5:3c:3b:44:39:4f:aa:54:
62:a4:cc:f5:9a:d9:f5:3a:61:0f:15:c1:ba:46:2a:a6:67:3c:
78:52:94:9c:f4:9c:9b:56:99:ea:38:fe:ab:0a:c5:12:f7:31:
42:f1:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:28 2025 by rpki-client