Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: 2i29bRuOhuwCjnFJubEkeKXtwgXJQlfWTw9Kg9lUASM=
Subject key identifier: D2:69:82:7E:3A:73:38:7B:8C:1D:C7:E6:4A:1F:CB:D9:A8:1C:9C:4F
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019849D34D24B0079BD49C7C73D5A11D74B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: FE
Signing time: Sun 27 Jul 2025 03:00:41 +0000
Manifest this update: Sun 27 Jul 2025 03:00:41 +0000
Manifest next update: Mon 28 Jul 2025 03:00:41 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: FVweIRvNnnoZXeKCR4jNnVf4GDTto1T1a0vvLAVxsSM=)
2: aiQzKvCLxoc-jbSifPWI0H5s0EY.roa (hash: 2MNoWPbLxGTHxE75GVGoT7L//M3cbhmYnAI81N0/HEk=)
3: e6px4NYFUKOjtigYEtL8KdaRy0k.roa (hash: /gzrTJVVJRwKZ+ywWGLia/Q0M//BQxmw0Q5lhIV8U3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4d:24:b0:07:9b:d4:9c:7c:73:d5:a1:1d:74:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jul 27 03:00:41 2025 GMT
Not After : Jul 28 03:00:41 2025 GMT
Subject: CN=d269827e3a73387b8c1dc7e64a1fcbd9a81c9c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:ac:ba:1a:86:ef:2c:da:32:82:43:71:ac:
d7:c3:55:02:61:44:bc:4f:96:48:71:c9:f4:70:f4:
00:43:7e:bc:25:3e:08:3f:d2:01:0a:06:35:bb:58:
f6:df:8c:50:fc:7d:ec:46:79:fe:55:e2:d0:d7:e6:
30:a2:8f:c1:65:16:89:ac:7f:35:99:45:0d:f1:1c:
5d:cc:8c:b0:78:d5:b5:64:18:d6:bc:8e:81:64:68:
f8:49:fa:32:d5:de:9c:b4:44:08:0b:14:46:98:fa:
a1:3b:f6:31:01:cc:a5:44:90:1f:6a:b0:c6:77:0f:
43:5d:ce:87:99:aa:e7:86:7a:f5:1b:65:39:51:2b:
a6:17:8e:bc:ef:fe:af:c8:4f:98:53:9f:ae:29:e9:
53:27:fe:40:21:df:81:ec:28:22:da:f6:d3:0a:af:
9f:d9:d7:d6:61:9e:a1:22:7b:6e:c5:99:5b:66:4b:
00:32:43:04:d3:68:03:b0:64:42:63:60:d5:a2:d3:
45:3d:31:54:59:94:48:e1:b4:45:cb:d1:d6:43:79:
ed:99:ff:16:ac:f5:7b:6b:1c:42:ca:b5:26:c3:4a:
fe:40:15:42:13:c6:a2:59:19:25:1a:63:43:e1:29:
8e:2e:d7:78:24:84:0d:b2:df:64:dc:95:ef:cf:4f:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:82:7E:3A:73:38:7B:8C:1D:C7:E6:4A:1F:CB:D9:A8:1C:9C:4F
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f9:1f:3c:bc:3e:c9:2b:34:b6:99:80:d9:a1:2e:71:d5:24:
1c:2a:c8:e8:5b:1d:5b:2b:5f:72:8a:e1:8d:c8:33:74:c8:ce:
de:46:04:97:d5:c9:4b:65:05:b9:71:47:ea:d4:11:9b:34:ff:
06:68:4e:c5:27:6e:7d:6e:32:e7:be:f7:eb:a9:e2:f2:89:69:
00:cc:4b:e6:1f:6c:77:21:c2:21:79:a1:45:1f:e3:4e:c8:59:
62:03:fd:79:17:f2:54:87:9f:1d:e0:f6:27:8b:93:49:8e:3d:
c0:c7:c6:52:75:c3:0b:c7:ff:2d:7e:5d:d7:2e:57:dc:e4:4c:
b9:c2:94:95:c3:39:46:29:10:ea:96:f4:b8:f5:48:9c:ef:b4:
45:96:0f:bb:84:ce:d6:27:1d:a7:5c:e0:37:91:cd:78:aa:0c:
0d:0c:e1:c0:06:c4:2b:85:c4:3d:40:69:4a:33:cc:9d:b2:8e:
4b:e4:24:90:4e:63:3c:67:c5:70:a8:97:0a:af:90:67:08:b7:
d9:a4:91:e6:a1:88:3a:d4:08:a8:30:8e:7b:fb:43:94:31:6e:
89:d6:db:23:0e:8d:f5:40:2f:c6:47:78:ff:33:83:74:47:59:
10:de:8a:68:12:d2:f2:b9:02:bd:ed:e2:8b:80:ad:03:8b:87:
ee:33:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:44 2025 by rpki-client