Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: Kab+ZZ/eHjgZ6qRgfJ7aAbCYt7qY2wibuFoqme6jRMw=
Subject key identifier: A0:AF:7F:1C:E9:F5:55:81:9C:10:16:BD:A1:D2:C0:6D:49:49:AD:C6
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 0198496653A1CEBDE2A01C87388BEA12E1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0676
Signing time: Sun 27 Jul 2025 01:01:39 +0000
Manifest this update: Sun 27 Jul 2025 01:01:39 +0000
Manifest next update: Mon 28 Jul 2025 01:01:39 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: 3LhPzuBEb1/BQDvx/sEFc3FlY9QZzlb/EqKfLi2LTt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:53:a1:ce:bd:e2:a0:1c:87:38:8b:ea:12:e1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Jul 27 01:01:39 2025 GMT
Not After : Jul 28 01:01:39 2025 GMT
Subject: CN=a0af7f1ce9f555819c1016bda1d2c06d4949adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:df:4a:87:7e:d5:73:15:ad:5a:0e:18:10:
f0:54:3f:cd:47:97:7c:ee:4f:ef:52:e1:ae:ed:03:
41:e1:55:0c:8a:a6:48:13:bc:fb:ee:59:c3:89:08:
ac:64:f1:45:67:31:40:8a:d6:eb:68:5d:63:1c:4e:
32:40:21:1d:c3:af:48:84:a1:f0:26:69:e7:92:34:
e2:96:2a:ff:34:3e:33:22:8e:f3:75:b5:25:05:70:
6a:14:3a:ff:8f:1f:70:1a:28:4a:08:78:50:3d:69:
7e:1a:1d:9f:50:fc:5c:b1:76:a5:01:9b:9b:b2:37:
b8:9a:75:3e:2d:3f:fa:17:88:3a:c8:77:4f:c0:c5:
2f:a4:d9:87:24:ac:28:c3:0f:96:ed:58:19:2b:9c:
fe:d5:97:43:21:e3:73:0b:08:90:42:11:46:53:c5:
dd:60:52:6a:ca:9f:4f:68:6e:dc:41:db:65:89:bd:
b9:d6:04:f6:28:68:d2:04:5c:eb:7f:13:84:de:ca:
be:c1:b9:b6:b5:93:42:e5:e8:3f:c3:1e:1a:c4:47:
3c:89:24:b1:cf:70:f7:43:f7:ab:ac:3c:ff:94:e9:
37:a3:61:9b:ec:ed:0c:e2:4f:93:8d:ca:70:ea:37:
45:6b:77:74:b2:cc:5a:4b:89:37:2d:46:86:4a:fc:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:7F:1C:E9:F5:55:81:9C:10:16:BD:A1:D2:C0:6D:49:49:AD:C6
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:7f:b4:82:b9:21:13:a1:17:b5:ee:4c:bf:2a:a7:e5:2a:
9b:88:e6:30:e2:9d:b3:1a:a5:67:2b:0f:99:7e:41:82:b9:44:
d6:59:29:bb:fd:cc:ff:3b:45:2c:92:f6:1b:86:e1:43:9f:13:
78:f3:e1:c0:de:98:bb:6e:a0:49:ce:1f:d4:9d:e5:9f:ab:a4:
b2:b4:21:78:d9:bd:d4:69:5c:22:65:d3:4c:54:0c:5e:25:80:
e6:97:7b:4a:d2:84:e8:71:00:a3:38:a8:51:bb:54:2e:0f:75:
cf:c4:9a:23:b1:dc:b8:87:12:02:3e:3e:72:c9:83:7d:19:77:
44:ca:9e:2d:4e:b4:d4:3d:74:56:e1:9d:19:bb:64:83:56:95:
42:03:f1:31:cf:b7:7d:ef:9b:6c:0b:f4:23:af:69:a9:b1:5a:
44:a8:bc:75:a5:b6:74:0e:d0:d2:e0:ca:9b:c5:95:05:99:ae:
06:fd:80:36:de:c6:01:f5:60:a6:ab:d7:9c:4d:b9:a3:61:8b:
04:98:64:be:7d:6f:71:1d:28:77:4a:9e:81:f1:e0:f6:78:ba:
55:cb:08:40:57:15:6b:bc:a1:26:2a:31:bd:f9:d4:09:37:e1:
52:35:73:14:bc:6e:2f:46:df:cf:ab:4b:80:4b:e5:06:43:fe:
6a:12:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:08 2025 by rpki-client