Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: NCG+HeB/56qubmSZv7vdm5F6yEWB44QsLEmB5e8B9EA=
Subject key identifier: FB:BE:81:75:2E:B5:D9:13:FB:67:24:68:85:FA:20:D6:24:C5:16:B4
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019848C0B2A09D15946B72201427E7BB6E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 061A
Signing time: Sat 26 Jul 2025 22:00:44 +0000
Manifest this update: Sat 26 Jul 2025 22:00:44 +0000
Manifest next update: Sun 27 Jul 2025 22:00:44 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: l2w9gv8g8WZNZJkkgJQOWCOeV7gc/2TyYlDOydStS1k=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b2:a0:9d:15:94:6b:72:20:14:27:e7:bb:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jul 26 22:00:44 2025 GMT
Not After : Jul 27 22:00:44 2025 GMT
Subject: CN=fbbe81752eb5d913fb67246885fa20d624c516b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:d4:df:30:b0:d0:c5:0c:54:59:67:91:11:
9a:2a:11:01:8e:1d:f2:3c:64:c1:85:58:e6:29:c4:
0f:c9:44:5e:16:05:7d:6b:4e:c8:36:28:c2:9c:ea:
70:84:b9:4f:94:a3:56:33:46:64:60:39:9f:35:b0:
bc:1e:f0:a6:33:a5:f2:5b:ec:99:c9:dc:b9:9f:ee:
9f:94:6b:93:06:a5:b3:18:7c:56:95:2c:ca:e3:9c:
83:f4:18:80:21:e8:53:e1:ea:98:2b:3b:f8:d0:e5:
fd:ec:02:09:76:e5:c5:8d:26:15:95:1c:d4:80:08:
a0:5a:b2:86:3d:57:82:b2:b2:7a:a1:f1:16:51:50:
f4:e4:0e:f1:24:11:a4:00:67:91:15:df:ac:be:6e:
53:18:78:49:ec:b2:93:2a:bc:3d:b1:35:e9:28:93:
a6:c1:dc:fa:32:81:b4:52:bb:78:85:bc:ef:22:62:
08:8f:fb:3c:2b:fc:9d:94:3d:2a:3e:4b:a6:52:d2:
85:11:29:fa:c3:9b:15:6d:7d:e9:5a:1a:a9:3d:39:
52:3d:2f:cd:eb:e0:52:b1:8a:6b:f9:6b:2c:7d:3c:
fa:2f:f6:45:26:10:21:f7:2b:a6:fd:b8:09:18:51:
c2:84:b4:ca:2b:53:9b:d7:74:01:a8:96:7e:a2:2d:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:81:75:2E:B5:D9:13:FB:67:24:68:85:FA:20:D6:24:C5:16:B4
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ba:93:ad:89:29:d2:3b:ab:ed:8b:49:09:74:da:fb:d0:e8:
1d:fc:94:35:79:ae:fe:69:13:2f:be:15:f7:a8:c6:8c:50:18:
5f:a7:74:4e:d5:5e:13:33:d4:5d:14:56:8e:cd:4e:64:c1:52:
e0:56:6d:7e:0e:ba:e7:b2:da:9c:f4:9c:cb:e2:84:b5:83:6c:
13:13:a3:38:02:ca:36:ed:5f:7d:e3:f0:d5:cd:ca:28:ee:9a:
47:6c:be:a2:32:50:f0:2b:23:f3:c8:6e:0b:c3:91:db:6d:58:
39:79:7c:af:b4:7f:80:5e:7b:8c:bd:70:ff:17:8a:ad:db:48:
14:ad:79:13:ac:13:49:d8:e0:99:58:e3:bf:b9:e7:fe:55:44:
49:25:dd:80:53:95:08:fa:9d:07:60:dc:99:52:69:66:1c:04:
7a:63:63:3a:a6:4f:ac:28:e0:e5:0e:d1:9a:95:ae:1b:a3:c2:
8b:65:21:8f:52:36:58:18:9e:53:30:19:ff:1a:6d:69:45:de:
df:cf:ef:26:86:e0:7d:49:8e:f5:4b:90:6a:be:00:71:99:f7:
91:f6:d8:54:fd:f7:6a:7c:f0:86:35:98:92:33:54:88:41:fc:
25:0c:41:24:78:41:e3:68:bc:ce:c8:ed:63:98:fd:94:d0:91:
c4:6a:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:45 2025 by rpki-client