Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: 5rav5EZz5AFak1GvE2T1iq6Sj5QK0vqOKU+hiJCU8S8=
Subject key identifier: C0:9A:9D:C7:C0:E4:DE:16:27:08:8B:CD:A7:76:65:19:09:F0:3E:CF
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0198D77345CEA184D123C97DF24CA3C0D06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 05D1
Signing time: Sat 23 Aug 2025 15:01:52 +0000
Manifest this update: Sat 23 Aug 2025 15:01:52 +0000
Manifest next update: Sun 24 Aug 2025 15:01:52 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: WJUix+0zK0z+zXD7pWX2e18GaGVToBp+mvcFrzxg9Sg=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:45:ce:a1:84:d1:23:c9:7d:f2:4c:a3:c0:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Aug 23 15:01:52 2025 GMT
Not After : Aug 24 15:01:52 2025 GMT
Subject: CN=c09a9dc7c0e4de1627088bcda776651909f03ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:fa:20:50:de:be:fd:af:49:e0:89:d3:74:
59:90:97:e8:73:b4:51:4a:d0:4d:15:99:bc:a5:7f:
1b:4e:36:70:59:aa:56:df:e6:fc:54:60:c9:de:b5:
ad:09:b1:e4:7c:68:12:04:fa:58:16:d1:be:31:97:
1b:c5:ea:a2:82:81:3a:c7:c0:1e:26:6e:7d:fe:a6:
a5:46:5b:e6:0d:17:27:bc:e2:cb:19:56:20:db:e4:
fe:22:5f:1f:02:cb:48:18:9a:53:e6:d9:ec:6a:e8:
10:57:e7:ac:cf:c7:64:85:7a:9e:07:25:3c:b2:55:
ec:6a:5e:83:5e:53:b3:8c:86:75:a2:9b:23:ae:b2:
3e:05:0c:df:de:5c:93:7f:e8:6a:69:60:87:14:b8:
d4:18:d1:9a:86:fe:c1:ee:23:cb:c3:87:87:53:f3:
8d:47:35:70:d2:38:c8:c5:ac:f4:05:a3:e1:09:b5:
c6:24:0d:87:72:b6:c1:31:8b:99:98:ac:7a:03:bd:
8e:70:5b:ac:ee:3e:f3:38:b8:b4:82:ea:0e:69:8d:
61:43:4c:a4:8e:ce:fa:15:d2:db:e2:3b:42:73:1c:
89:0d:45:4f:75:73:1e:21:c0:56:a3:45:f0:d5:9b:
1e:f0:03:c2:73:9e:6c:06:08:6f:40:36:8c:23:5b:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:9D:C7:C0:E4:DE:16:27:08:8B:CD:A7:76:65:19:09:F0:3E:CF
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ae:53:8a:f3:f1:01:06:4d:11:78:97:06:f9:de:c4:29:4f:
5d:fb:aa:89:e2:12:c1:f1:17:39:5b:8d:78:39:39:ec:80:50:
fb:21:c2:d5:c7:95:56:4f:2d:07:d0:c4:8c:c5:b0:4e:d3:ac:
26:69:81:8b:0b:fc:49:d7:8f:dc:0d:45:9e:cb:54:fb:9a:98:
aa:14:aa:09:59:1e:2e:81:b3:96:5a:da:e5:61:25:9a:cd:ea:
90:83:3e:4c:33:37:be:d1:55:1b:a5:61:48:ac:b1:c6:f7:81:
51:b5:15:4d:95:95:28:2f:77:ad:66:86:0e:8d:73:fa:a8:9b:
d3:e5:18:68:89:f7:9b:f6:b2:19:68:35:ba:4b:c2:6e:7e:7f:
71:a1:02:5b:f9:af:cd:99:17:a3:30:34:fa:13:3f:04:92:1d:
f1:de:7a:eb:c7:de:08:dc:09:71:65:2a:72:8f:09:22:95:c8:
ac:7c:05:56:3a:63:52:b1:71:5c:1a:4e:8a:3d:76:04:db:39:
66:48:2c:38:50:7e:d3:fe:86:31:00:75:b1:2b:56:40:2b:22:
c1:7e:a9:c5:cb:36:0c:f3:4b:0a:d9:a2:19:51:01:fe:e1:8e:
19:39:04:93:cd:73:c3:3b:58:df:44:35:28:99:d4:6c:c7:d6:
cb:65:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:02 2025 by rpki-client