Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: Yi8EuOZlt37ZReAJhNcpcnXzbM5HZHQrMHMULxHm7E0=
Subject key identifier: 12:2E:A5:69:5F:D4:36:BD:5D:4B:EB:0B:95:00:C7:3B:17:42:26:77
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 01984B8A7F5C9AE8587358D307C333035737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 09F2
Signing time: Sun 27 Jul 2025 11:00:24 +0000
Manifest this update: Sun 27 Jul 2025 11:00:24 +0000
Manifest next update: Mon 28 Jul 2025 11:00:24 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: rS+oRa3vVXxwT1Lsoo6PvpGvdbFJJV7oxwtwqefQBfE=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:7f:5c:9a:e8:58:73:58:d3:07:c3:33:03:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jul 27 11:00:24 2025 GMT
Not After : Jul 28 11:00:24 2025 GMT
Subject: CN=122ea5695fd436bd5d4beb0b9500c73b17422677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:33:7d:40:f5:57:e4:0e:8d:b9:c8:9e:44:
62:a5:94:2a:e6:a7:e5:e9:b2:d2:6c:3c:e1:d1:33:
c9:9e:43:88:8c:55:9d:a5:85:c9:ab:bc:8c:3b:7b:
da:81:c8:e8:32:d5:43:e9:2d:85:6e:9f:e2:ec:a9:
02:b9:ce:c2:c1:49:93:a8:3a:4e:15:45:95:43:83:
46:0d:93:4a:8a:c1:47:0d:86:dd:dd:b9:26:30:91:
78:70:92:fe:9d:ac:47:12:20:94:fe:c6:b3:49:06:
9b:73:fe:7a:d7:1d:65:30:97:d9:3f:ff:5f:8d:cc:
f7:6a:0c:d6:f2:cd:d5:c7:88:db:d1:1b:34:a7:63:
03:86:bb:43:7b:f2:d5:0e:be:1e:bc:29:2c:7d:fc:
d1:04:fe:fc:0a:b2:7a:f3:ce:86:dc:05:ce:81:75:
37:84:1c:b6:4a:2d:dc:e9:c7:ec:35:8a:7a:57:f6:
aa:6c:8d:61:a5:28:f6:af:9f:03:db:9d:1c:f6:89:
6a:aa:18:72:c3:5a:fc:16:38:07:aa:62:b9:e5:67:
86:04:b5:71:1b:10:48:16:75:5e:2f:8f:60:f9:49:
4c:47:5a:c0:58:99:d2:eb:e1:6c:64:2b:b0:6d:56:
e5:cc:a0:82:f4:72:a3:76:11:a2:b3:2d:fb:ab:e1:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:A5:69:5F:D4:36:BD:5D:4B:EB:0B:95:00:C7:3B:17:42:26:77
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:e1:c1:01:e1:52:41:e2:87:26:9c:38:71:f4:6c:88:6e:
20:73:e4:18:a1:c1:75:36:42:f9:92:61:74:80:08:00:ea:fe:
ec:6f:fa:4b:f4:8a:15:e7:66:3c:61:cb:78:2d:da:03:f9:e1:
c7:a5:6b:88:61:98:fc:4a:ac:d1:7e:94:f9:6a:d0:2a:03:e6:
f5:1c:9d:64:ca:cf:e3:0e:ca:69:2b:44:6f:d9:1e:86:9d:90:
3c:43:14:d6:b0:cc:2c:cb:95:16:33:66:45:d7:13:5a:87:f6:
06:80:f0:68:ab:10:72:91:45:64:a8:43:f5:73:7b:e9:85:3f:
dd:a1:35:30:f9:99:bd:9d:5e:29:ee:d4:e8:9e:7c:48:a1:f9:
5f:45:6a:5e:ad:21:5a:63:1d:87:d9:b7:0a:99:e1:54:23:be:
8b:34:3c:bb:5f:59:5d:09:b6:ac:b2:c2:dc:a3:39:b6:9e:a3:
b0:ff:24:e4:fb:20:dc:bc:4d:7f:b4:98:b4:fb:de:d0:15:88:
bc:a6:51:8f:96:5c:84:84:6d:ec:bf:f9:fe:c5:93:9b:5a:80:
72:bc:36:1d:65:09:21:8f:57:e9:2c:df:4e:74:2c:52:29:23:
fc:25:b4:20:49:07:2e:70:df:aa:95:18:9e:7a:0a:c0:ba:3b:
5b:c5:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:54:03 2025 by rpki-client