Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File: X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier: u5/vCYbqbdZ4f5L7vZu6fcnb1k5vrkb9kfbg8GgPLMo=
Subject key identifier: 65:3A:A8:CD:54:A4:14:D8:FE:BB:C4:F3:EF:68:D6:E4:ED:6D:CC:C3
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer: /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial: 01984A783C6A4A489BC5194026501041B1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number: 0C1C
Signing time: Sun 27 Jul 2025 06:00:50 +0000
Manifest this update: Sun 27 Jul 2025 06:00:50 +0000
Manifest next update: Mon 28 Jul 2025 06:00:50 +0000
Files and hashes: 1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: blzNCn8aT+T6kmPMrObX0O16hIHIrsThz2mZs4u188U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:3c:6a:4a:48:9b:c5:19:40:26:50:10:41:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Validity
Not Before: Jul 27 06:00:50 2025 GMT
Not After : Jul 28 06:00:50 2025 GMT
Subject: CN=653aa8cd54a414d8febbc4f3ef68d6e4ed6dccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:23:49:d7:03:78:3e:0e:3f:05:2c:f9:58:
4a:b7:58:3a:8f:54:ae:0d:a6:14:d1:27:6d:39:a9:
c3:f7:4b:ed:28:0b:85:d6:d9:01:4c:f4:14:30:a7:
d2:6b:9f:f0:be:94:79:73:d9:32:5f:88:49:d9:fe:
e2:e7:49:81:da:6f:51:7b:78:e8:7a:8e:0a:2d:46:
d6:9d:f7:e9:47:43:37:d3:25:e6:e1:6b:2b:13:c0:
d6:cf:df:ec:cb:42:a4:f9:75:f2:f3:87:bf:e8:8a:
2e:93:0d:ea:a4:b6:d4:6f:7a:05:1e:08:1d:21:f5:
ae:5d:90:bb:78:a7:d6:58:ea:dc:50:8a:3e:54:b3:
a4:33:01:7a:b9:21:2e:a2:60:26:7e:1a:7c:39:b9:
d1:1b:d5:e6:3c:f9:0b:06:05:6f:59:72:64:3a:f2:
b0:38:2d:71:1a:a6:a2:05:a9:e2:87:dc:86:dd:f9:
db:68:50:8a:28:3b:d6:63:d2:3c:b4:98:cd:79:0f:
cc:9a:72:35:5a:67:86:3c:aa:ac:01:9e:48:06:7a:
24:10:37:e4:9b:33:1d:f8:a8:32:04:88:bc:fa:1a:
50:af:72:70:18:bf:a8:1d:7a:f8:3b:4d:ae:c6:0e:
91:23:76:ca:fb:eb:2b:69:45:3b:6e:43:1a:53:8f:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:A8:CD:54:A4:14:D8:FE:BB:C4:F3:EF:68:D6:E4:ED:6D:CC:C3
X509v3 Authority Key Identifier:
keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:e1:da:df:a4:b6:cc:83:f0:74:ca:b9:7a:81:e8:7e:68:
34:31:8f:01:7d:8b:93:93:bd:51:52:cf:3b:16:6b:16:cd:fe:
87:55:f7:0b:88:99:dd:f2:6c:36:2e:cc:ce:a8:92:d5:90:3f:
7f:90:4c:2d:16:31:11:c6:9e:c3:ad:e6:95:87:71:bf:99:de:
9a:54:4a:4c:a0:3c:b1:3e:d9:dc:b0:44:c7:32:fb:55:14:6f:
55:04:17:cf:fb:2e:9c:ce:75:09:16:0a:61:e0:c4:b0:81:5d:
77:bc:7f:b5:25:9e:9d:90:1b:48:a4:42:28:42:d3:54:a5:52:
c1:ff:d7:8c:45:e4:97:9e:27:9e:cb:ce:e1:93:13:82:cd:83:
fe:e6:03:d0:a7:3b:47:de:d2:b9:04:9b:b0:eb:c5:0c:ae:45:
97:28:33:19:c5:27:b6:c0:5d:79:15:63:00:c6:03:14:55:e8:
5a:51:97:8a:88:ae:77:98:5f:9a:c6:b9:4b:5e:c6:6c:33:a9:
41:8e:81:c9:8e:c4:32:e3:34:56:b1:8e:15:c4:b8:39:4a:21:
ab:a8:b0:9e:f2:14:59:88:8f:a2:51:9c:8a:f2:91:d6:b6:ad:
29:f7:82:63:63:c6:fb:1f:c9:37:9a:ce:1d:e8:97:1b:f4:2b:
bc:25:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:34:36 2025 by rpki-client