Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: ip0zX/RkTo9AemaPnNdG8FCNuBBQAwc9YyczYJL3XFU=
Subject key identifier: 52:D3:90:EE:91:29:51:31:F7:2C:DA:A2:34:0A:A5:02:81:17:10:15
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 0198D515C52600F075FBA73ABFE7DB46778E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: /DCXUZvIDrVt2SwLGLnge8baAvzKxlR64VpN3rQvVFU=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c5:26:00:f0:75:fb:a7:3a:bf:e7:db:46:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=52d390ee91295131f72cdaa2340aa50281171015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:ae:8e:54:4d:8e:67:a4:52:e4:98:95:e7:
e2:8e:a8:fb:9b:e0:a9:dc:43:d3:8c:86:07:26:6a:
c1:01:74:ad:e9:4c:4b:53:4f:ff:ab:9e:93:40:49:
0a:7c:36:24:ca:92:c9:4e:43:82:b7:d1:cc:21:e5:
1a:00:03:20:62:ff:72:f0:e5:46:fc:0d:f0:85:e5:
92:cc:f8:83:46:60:9f:65:68:10:6d:e3:84:3e:1a:
eb:61:1a:64:2f:d0:d9:49:36:77:5f:1b:44:d9:6c:
7b:af:c7:b2:09:fd:9d:4f:98:22:57:59:b4:9a:4b:
1b:d5:bd:2a:cf:16:78:6f:4e:17:29:00:3e:7e:e5:
74:7d:b5:6e:20:2a:39:4c:03:9e:8a:5a:dc:f1:f8:
16:d1:f6:86:27:5e:ca:3b:0f:70:50:74:65:45:11:
55:4e:7c:99:fe:f2:a3:ee:8b:b0:29:d3:c0:28:f8:
b1:74:08:ab:a5:e5:fe:cc:a3:06:38:49:90:8c:be:
74:fd:b6:bf:4d:94:65:3a:8b:f0:a5:9a:13:b4:30:
9d:d5:f7:07:78:c1:08:d2:4c:03:1c:c1:0d:f9:f7:
fd:93:c9:ea:0c:78:11:9b:dd:7f:f4:9e:06:4d:bd:
cf:99:44:33:13:4f:28:8e:12:bb:f1:e7:b6:97:eb:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:90:EE:91:29:51:31:F7:2C:DA:A2:34:0A:A5:02:81:17:10:15
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:93:9e:fc:e9:62:18:61:84:57:d1:79:20:40:b6:77:81:
6d:2e:d4:f1:05:4c:52:fa:4b:7a:1f:aa:b3:ff:e3:08:e0:11:
8b:21:c7:f5:4b:5a:8f:5e:bf:f8:ec:f0:d1:0a:3a:d6:a9:db:
46:10:f9:5a:76:34:46:e4:84:ac:00:92:46:3e:ea:c4:41:66:
47:b5:23:85:f7:c5:f6:6e:5e:43:44:0b:80:7d:65:8b:b5:76:
94:72:25:fb:1a:73:46:bf:59:fa:88:ee:47:f3:18:4c:68:66:
90:c0:0c:cc:ee:4c:c4:10:3c:9f:6c:34:0f:29:a9:3e:11:bd:
60:3a:c1:5d:c9:63:93:38:bc:68:58:e5:3c:35:e1:ce:0d:35:
b9:8d:79:6b:ab:4c:ef:36:72:ef:c3:bb:5b:ab:60:80:37:24:
a8:0b:35:2e:aa:a1:d6:86:9c:a7:08:55:b9:54:25:b4:93:6d:
02:c2:1e:db:b7:af:43:1e:22:dc:32:62:cf:a9:c5:6f:23:89:
31:8a:c8:de:a7:85:58:39:cc:20:78:86:f1:60:e7:33:b7:2e:
9c:c5:0d:bb:bf:24:e9:5b:21:0d:99:86:43:70:37:6d:3f:d7:
2f:27:68:4e:b4:15:8b:1c:2e:9f:f2:8e:4c:05:da:63:f0:f8:
39:e0:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:57 2025 by rpki-client