Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: jP6JEmeb9uAVQCySiL/fSrl6/NIzbqWeRdPpUnRl67Y=
Subject key identifier: 1D:B7:70:FC:8A:FD:91:57:D1:7E:64:71:83:F0:ED:17:A5:C0:0B:71
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 0198443F3CDCCE2F9C3CF04ADCA54FED3894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: D4
Signing time: Sat 26 Jul 2025 01:00:51 +0000
Manifest this update: Sat 26 Jul 2025 01:00:51 +0000
Manifest next update: Sun 27 Jul 2025 01:00:51 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: g3L2VJdNqOekw/Rhu00N+Jv9kuy0irbg19gpksubyl0=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:3c:dc:ce:2f:9c:3c:f0:4a:dc:a5:4f:ed:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Jul 26 01:00:51 2025 GMT
Not After : Jul 27 01:00:51 2025 GMT
Subject: CN=1db770fc8afd9157d17e647183f0ed17a5c00b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:50:ab:c9:e7:74:3f:68:f3:3a:37:ae:f2:
16:bd:84:ea:75:20:7a:35:12:d5:0e:c6:72:cf:9a:
b0:e0:ba:0d:e0:66:c7:a4:ce:c6:1c:f1:11:9d:26:
6c:35:b5:bc:7b:cf:51:62:20:9c:e3:fb:3e:28:f1:
57:7f:ab:de:3d:d0:36:a9:29:84:76:3e:2c:8b:c6:
a1:c5:99:b4:c8:9c:9d:bb:f6:79:77:78:14:d9:43:
82:99:77:ad:ff:17:df:c8:71:b0:ce:25:2b:d5:66:
93:bf:7d:5c:f6:6b:42:69:e2:e3:a3:ba:c0:e3:e9:
15:75:ad:18:33:e2:9d:d3:41:17:08:78:ca:b9:5e:
75:67:29:64:ed:ec:19:d5:b4:63:48:4f:cc:f6:09:
2b:19:c8:b9:19:1d:d8:34:6b:f1:52:f6:f9:75:63:
70:f5:84:9a:68:9f:18:7a:9d:5e:06:af:46:5d:f0:
52:91:ac:bc:38:76:1d:87:b7:71:cf:7f:9b:b0:fc:
fb:3c:ff:3e:a2:e7:ec:67:e5:56:57:d4:b3:06:45:
0f:1a:18:54:a2:7b:4f:b1:dc:38:8b:4c:b4:ff:0b:
04:de:c2:6a:94:f7:83:bd:83:c7:e2:13:58:10:a4:
d5:c3:36:c4:13:70:cc:76:13:13:5f:f2:e9:66:59:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:70:FC:8A:FD:91:57:D1:7E:64:71:83:F0:ED:17:A5:C0:0B:71
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e4:97:30:2b:b2:84:aa:dd:70:3f:67:98:25:fc:a3:ed:90:
fc:f7:76:bd:1d:c2:52:0a:07:40:fc:b7:81:e0:e4:cf:ba:6a:
e7:71:91:12:92:c0:35:e9:52:a7:53:35:79:42:67:ab:c1:fd:
50:7b:6d:67:df:73:15:0b:bc:99:08:2b:86:fb:60:92:af:c4:
36:1e:ff:ea:83:15:96:ab:fa:51:79:41:76:94:f2:60:bd:0a:
ec:df:22:fd:6e:79:14:4b:05:e3:26:6a:88:cf:0f:d8:a2:41:
c8:01:15:16:ff:ca:04:2a:82:0a:80:78:eb:2a:cc:33:2e:d7:
dc:a0:15:f1:fc:7b:06:1d:95:28:ca:60:84:29:18:99:30:1a:
b0:37:50:00:25:99:76:0b:24:40:21:d3:af:68:8c:fa:bd:30:
f4:70:ed:c3:aa:59:a4:d4:dd:a8:f5:3e:81:d9:71:30:79:92:
71:7d:1a:89:15:c4:2e:d2:ae:84:ff:28:e7:ef:92:5c:70:a6:
5e:81:40:9e:ff:cc:18:77:d7:22:00:73:c0:7d:27:de:a3:ea:
56:62:49:13:c7:60:68:6a:17:a1:73:b5:6f:f3:f9:a1:97:37:
c0:2e:52:4b:86:aa:63:17:57:97:66:b6:98:ee:7d:b7:d0:69:
e7:1d:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:48 2025 by rpki-client