Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: GhE6gV1IW69XXiqkjSAbclKOLKp1kI69HqKg5jPFr7w=
Subject key identifier: C5:00:90:5C:FC:D6:B9:92:BD:08:86:7E:9D:8E:46:12:49:B5:D6:8C
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 019853E949613DA53B9E0D85F0ABFD8C8BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 02:00:54 +0000
Manifest this update: Tue 29 Jul 2025 02:00:54 +0000
Manifest next update: Wed 30 Jul 2025 02:00:54 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: 4rbU2gUjlku2swROZpDQ+PPqFHOYUWi24ONpbq0qduY=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:49:61:3d:a5:3b:9e:0d:85:f0:ab:fd:8c:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jul 29 02:00:54 2025 GMT
Not After : Jul 30 02:00:54 2025 GMT
Subject: CN=c500905cfcd6b992bd08867e9d8e461249b5d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:de:ae:f8:8b:62:31:77:a1:23:ee:e0:a0:
f0:5e:e2:14:7b:5f:58:1d:64:bb:d3:c5:77:84:e2:
e7:06:ca:f3:b8:3c:9c:2f:47:ba:c2:7f:28:3a:f7:
2f:06:08:9f:a9:01:eb:0a:d8:b1:8e:88:ee:97:4e:
9b:7c:b1:33:19:b6:c7:61:3d:3a:c8:92:36:b8:89:
9a:c8:85:d1:4f:2c:28:f1:39:32:7a:18:80:ba:b3:
13:91:1c:0e:c6:29:24:d2:2d:e2:fc:8b:df:3a:3c:
9d:5e:4f:d6:a4:10:d2:bd:fe:da:b8:f4:d8:57:8e:
86:13:15:b4:b9:5c:ca:57:67:b8:42:30:75:66:ce:
c8:37:f3:b4:bc:1a:3b:80:f1:b5:a1:73:6d:7e:ac:
ca:9f:ba:98:02:a4:c9:0e:f4:de:c5:47:f7:3f:c5:
40:16:8e:0c:5f:1e:80:35:4b:03:43:ac:8a:09:fd:
72:b4:41:e7:dc:ec:16:5a:8f:c9:24:70:21:2e:17:
7a:10:fd:a7:5c:16:10:7d:cc:ef:49:0f:ea:56:2e:
b3:a4:68:99:27:86:f5:e5:a1:ca:4a:30:ff:10:9b:
6f:77:8f:e3:de:fb:35:ca:1d:ad:14:f1:58:84:ee:
b5:4b:82:99:63:60:eb:ac:76:d2:da:4f:8f:22:27:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:90:5C:FC:D6:B9:92:BD:08:86:7E:9D:8E:46:12:49:B5:D6:8C
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:2c:b9:da:b1:90:3e:7b:3e:4e:25:5d:53:c0:34:3d:be:
30:7b:df:c2:c9:c2:9d:e4:32:ad:3e:81:4e:25:5c:c5:c8:ac:
01:1f:37:76:56:f2:a8:1d:90:a9:6a:65:b6:7d:d4:6c:02:8c:
22:a3:11:ca:47:63:12:83:b0:27:13:ad:a3:81:14:de:3f:d0:
06:09:9a:33:2a:5c:f4:ea:9c:4b:cc:ab:d6:19:8d:95:a2:42:
f3:bf:83:17:23:8a:58:18:f9:19:01:e3:b6:04:c9:2f:f7:47:
ea:bd:1c:78:f1:bf:02:90:4a:c1:e6:7a:ff:30:8c:a1:f7:9a:
b6:0e:31:87:23:f4:9f:7e:72:8f:1a:29:04:64:24:58:bd:05:
49:34:49:5a:1d:a0:a2:57:e9:c5:61:ae:d9:68:a0:ec:6b:29:
e1:af:d2:17:dd:38:c3:4c:93:50:69:f3:35:85:28:05:dc:56:
c3:e4:0c:7c:c0:8d:d0:be:2e:13:41:39:cd:2d:3e:20:cf:ae:
5b:2f:ca:5b:54:71:a0:e1:4c:2a:cf:be:22:c6:d7:02:96:4b:
11:f1:f3:b3:f5:f6:4c:9b:bb:c4:c7:9f:1c:2f:b4:43:c7:0f:
c2:7a:ca:6a:e7:80:70:96:eb:77:e6:b3:62:2e:63:4f:db:08:
70:28:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:26 2025 by rpki-client