Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: 1ndnyxqx+y3ftYzkQUHlNBQZUjEiLturDzQpeNma9As=
Subject key identifier: 6C:EC:60:8C:1B:B1:63:8E:85:B7:4E:22:2E:A7:97:1D:D3:3F:5B:4B
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0197B745521B48ED8927C41F51607C8FCD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: a3eb2mc0rMgoeTM7jO8RIbiWIv+3OIvtTchYIRDaDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:52:1b:48:ed:89:27:c4:1f:51:60:7c:8f:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=6cec608c1bb1638e85b74e222ea7971dd33f5b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:b6:f1:2e:30:76:94:4a:3e:9f:fd:e9:ef:
58:56:bc:a5:ae:fd:0b:74:53:4d:c8:04:72:5e:5b:
11:ab:d4:fd:f4:56:ce:89:8f:58:b3:45:93:10:24:
e9:da:02:eb:81:57:eb:85:f2:e9:73:58:01:6c:a6:
63:f3:c9:fb:ef:6a:d8:92:ff:94:0d:b0:01:40:67:
30:44:b8:4c:6f:5c:2e:2d:54:5c:d0:f0:dc:82:7f:
03:16:64:82:96:e5:06:1b:0e:2a:55:1d:08:cc:21:
ab:84:14:a5:4a:29:e9:5a:a9:08:43:1c:7d:28:3e:
3a:d6:fe:37:68:b0:26:32:7d:ed:2c:cb:2c:8e:b1:
0e:18:20:d5:ae:3f:3e:4f:f8:e2:fb:e3:90:a8:72:
f6:fa:c9:bd:f6:eb:9d:50:5d:d6:90:24:33:90:ce:
4b:f6:57:cf:aa:df:d5:3d:f8:2e:f8:ff:b0:0e:ed:
86:84:89:31:ba:db:74:8b:79:5a:f8:ee:8d:22:88:
c6:2a:98:16:f0:a1:4b:50:99:47:d7:62:dc:a7:3a:
a8:02:0a:01:5e:d0:ca:f2:df:16:53:05:5c:73:56:
9a:b2:21:eb:7e:db:72:e4:a6:67:eb:fe:f7:80:ab:
f0:da:59:a2:4f:78:23:47:89:9f:cb:3a:1b:b0:82:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:60:8C:1B:B1:63:8E:85:B7:4E:22:2E:A7:97:1D:D3:3F:5B:4B
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:88:2b:1f:dd:ff:a4:b6:c4:65:c4:48:13:eb:5c:1c:a3:
a7:e1:7d:49:e2:3b:f8:10:eb:98:75:37:25:ed:93:52:19:68:
fc:4e:5c:d3:76:a6:0a:54:66:4d:d5:9a:5b:ae:08:96:32:2c:
19:91:a5:0e:a3:15:1d:09:0b:17:c2:45:38:6f:32:08:70:45:
be:13:05:f2:84:7d:4c:b1:fa:e8:b7:a5:be:cb:ee:09:73:04:
b1:10:66:15:ce:5e:4b:8f:90:78:50:dc:70:39:a3:a5:1d:63:
5c:86:1b:5f:3c:b9:75:92:f6:4b:f4:18:4f:38:85:db:21:d7:
fd:c1:c8:89:b1:71:4d:ce:95:8f:4a:14:2a:d7:00:31:6d:aa:
47:88:7e:56:b2:52:23:48:76:19:ce:18:aa:7a:cb:fd:3e:76:
7a:88:02:a9:67:ca:f6:f2:82:50:54:8e:b7:6e:95:b5:55:ff:
76:1b:4a:9c:5c:23:39:48:7e:6b:1b:45:82:12:c9:94:72:27:
0e:f5:7e:8c:fe:d6:71:7e:08:60:de:94:8b:35:4a:dd:a7:82:
35:f4:6b:97:24:03:67:66:a6:bd:9b:5b:cf:e2:d7:c0:4f:3d:
2d:80:10:96:5b:9e:2b:46:32:6e:dd:16:d4:3b:f2:e1:e5:78:
a8:21:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:24 2025 by rpki-client