Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: aucMmrvCt+oyhMzuIy7P0Pnz4KfirPjYbF5T5ivQw6w=
Subject key identifier: CE:DD:A7:FC:6C:99:D5:D2:AC:E8:C6:B8:2D:50:CB:97:D4:F5:35:8D
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 019848C0B8C75F8DAFE1B39D473ADD63CDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0DDA
Signing time: Sat 26 Jul 2025 22:00:46 +0000
Manifest this update: Sat 26 Jul 2025 22:00:46 +0000
Manifest next update: Sun 27 Jul 2025 22:00:46 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: l+U4o7K8C7tDDF82cCz5rQLWae1JOUm8f9Loa3rl+7Y=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b8:c7:5f:8d:af:e1:b3:9d:47:3a:dd:63:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jul 26 22:00:46 2025 GMT
Not After : Jul 27 22:00:46 2025 GMT
Subject: CN=cedda7fc6c99d5d2ace8c6b82d50cb97d4f5358d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:62:5c:e8:3f:71:32:48:8b:01:04:58:e5:
cf:26:1a:43:85:7a:0c:3d:90:9a:cf:94:d7:20:2a:
12:c6:82:25:10:d4:ab:78:39:7f:19:54:b7:03:09:
6d:fb:fd:49:6f:aa:62:60:e0:85:db:14:a9:8a:2b:
60:7a:26:af:af:bf:22:1c:e6:ef:2a:d3:ef:c6:38:
7f:e2:97:27:97:1d:bb:e1:bf:ff:35:b5:d2:91:88:
bd:0a:35:50:3f:d5:bf:96:b2:e5:70:5f:3d:5a:16:
e5:63:2d:0f:61:bc:e6:d2:45:0f:62:cf:de:7e:e3:
f9:65:85:d2:c2:ea:1c:db:e7:67:0c:b4:64:bf:18:
8e:41:65:fa:60:75:f8:63:98:56:62:99:64:14:b4:
ce:16:14:29:c5:84:f5:ee:16:c3:c4:bf:48:e5:e8:
35:f8:30:c6:7f:14:62:ec:d0:7c:b8:e5:5a:d1:c2:
a7:71:8f:49:2e:cd:04:f9:8a:10:b4:67:7c:9f:9e:
49:ae:a1:c1:ce:f6:bb:7d:65:34:ef:d9:d3:64:4e:
60:be:6f:e6:6a:e6:73:54:a0:b1:78:c0:fc:68:4d:
b6:dc:77:7c:08:9c:ce:0c:79:b8:b7:3e:bb:df:2c:
f8:63:a8:51:69:90:84:ae:20:42:55:2e:e5:49:4a:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:A7:FC:6C:99:D5:D2:AC:E8:C6:B8:2D:50:CB:97:D4:F5:35:8D
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:69:ad:fd:d5:cd:08:da:ff:5a:64:8f:42:2e:c6:33:8e:9d:
33:a5:5a:eb:7d:b0:ca:0e:71:15:8d:de:6b:75:3b:ad:29:27:
bf:a0:30:ef:64:74:3c:f6:cd:80:e4:89:c4:a5:d5:2e:ce:f0:
86:a4:4f:60:81:7a:87:14:90:fd:57:d0:ad:33:c9:e0:c9:25:
57:97:89:56:7e:f1:b2:19:a0:25:6e:ef:1c:cb:ba:24:e9:d4:
09:eb:ff:11:69:e5:6b:d6:c6:46:26:60:62:71:8a:42:a2:08:
bf:6b:0e:27:fe:55:ed:a5:48:02:26:bd:3f:fe:64:b0:47:81:
4a:4f:93:2f:7c:fe:4f:36:82:f4:de:03:1a:7c:79:da:b8:11:
f1:a1:78:b2:2c:86:73:a9:f9:b2:9a:4e:be:6c:e9:48:32:3d:
70:70:66:0e:33:c3:d3:bc:9d:8d:d6:3c:45:ed:1d:2c:a7:91:
59:53:bc:06:91:ba:48:fb:60:fe:8e:a3:0b:f3:f5:1e:a2:bd:
3d:4e:f7:4b:44:f5:42:97:33:99:79:14:59:27:15:1e:81:26:
8d:32:db:ed:72:d7:36:22:ea:ce:3b:f4:a8:87:a8:9e:72:a8:
31:5d:61:a4:d8:f9:8b:55:fc:c2:88:fb:11:fb:16:ab:53:80:
1b:ad:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:14 2025 by rpki-client