Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: kaE3M+KszPVC3Cm7WsKZpCKWgG1YoidAlegEVq2uifI=
Subject key identifier: 24:C9:88:C5:E6:8E:73:80:F7:BA:4D:25:DE:17:15:56:E5:DA:18:F1
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01984A77BF7CBFD5FFDB5BF2127AAF24FEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 038D
Signing time: Sun 27 Jul 2025 06:00:18 +0000
Manifest this update: Sun 27 Jul 2025 06:00:18 +0000
Manifest next update: Mon 28 Jul 2025 06:00:18 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: PQC6k7GBqwF5uhw91/oGYuOuGEicy+t76Q1xohtTnQI=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bf:7c:bf:d5:ff:db:5b:f2:12:7a:af:24:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jul 27 06:00:18 2025 GMT
Not After : Jul 28 06:00:18 2025 GMT
Subject: CN=24c988c5e68e7380f7ba4d25de171556e5da18f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:79:67:42:38:e4:bb:a4:1b:61:42:2f:07:
50:b8:33:c3:9c:9c:66:78:6d:ca:94:f1:82:5f:15:
bb:45:0d:28:fd:5b:66:05:3a:ae:b6:da:ae:53:2e:
bf:b6:ef:10:c9:42:40:dd:4e:b8:87:8b:f3:12:8a:
e8:57:56:7f:9b:05:b4:80:27:fa:53:7a:01:63:68:
a8:36:13:83:81:b2:cb:f5:32:0c:30:48:9c:f8:77:
03:7f:8b:a7:c6:71:ae:10:75:b6:73:de:a7:47:32:
52:33:3d:d3:b8:e7:4f:99:7a:fc:79:e3:b8:42:f3:
55:38:48:d9:29:0c:33:1d:31:90:d1:2c:46:20:e6:
95:15:c4:81:19:26:4f:5b:ed:e9:83:30:12:86:52:
e4:f5:60:82:26:3c:03:7c:f5:99:b4:33:a1:98:b2:
ec:7a:b8:1a:3e:f9:1f:4c:f4:df:82:53:69:6a:7f:
7b:9f:5f:fc:0d:8a:89:5e:29:18:c7:57:8b:46:02:
b9:ce:e0:5c:93:37:3b:9c:05:75:62:c0:1c:18:7b:
27:6c:03:f8:f9:d8:0f:07:3c:fb:a2:eb:e2:04:91:
06:02:17:30:e7:ec:21:ed:b6:72:6d:46:35:4e:a5:
e5:e8:f2:34:c6:42:06:86:65:43:e6:a3:53:8d:ea:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:88:C5:E6:8E:73:80:F7:BA:4D:25:DE:17:15:56:E5:DA:18:F1
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:20:9d:b6:83:36:52:f4:56:b8:2d:4c:99:f0:5c:a8:49:
3a:cc:1e:14:66:9a:a9:6c:24:81:ee:35:99:6c:93:a5:93:86:
53:37:b6:bd:a5:85:89:d5:34:10:42:f9:e3:05:a1:70:ee:91:
21:b6:3f:10:7d:7a:7a:5b:5d:88:d3:e6:58:ba:ec:3d:2c:3e:
1c:91:d0:5a:7f:c8:74:0a:f8:a8:80:dd:68:82:10:9f:27:91:
48:10:8e:e6:97:ab:a7:6a:45:80:48:58:5a:64:32:83:76:22:
bb:72:d5:28:09:a4:c4:b4:b0:0e:e3:39:ad:f0:7d:01:9e:4e:
1b:0a:34:7e:81:f9:d7:0c:2e:26:d0:ec:01:da:05:f9:7e:83:
a4:ea:af:39:c2:9e:0e:39:96:8b:96:9c:e6:4d:aa:91:e7:b0:
1b:15:1c:96:dc:e9:7d:32:74:c5:26:00:30:b5:3c:b8:c4:76:
a1:0d:95:f6:3d:7e:5e:8f:8d:7b:76:1c:78:cd:0b:bc:a6:75:
cc:00:21:9c:20:75:55:79:db:4e:45:25:f4:6c:a1:83:7e:95:
7f:90:2c:ba:ae:dc:99:1d:ea:50:ee:e0:eb:81:1e:fd:dc:84:
3c:a9:9b:30:ab:10:36:b9:8e:c9:26:09:05:b7:02:3b:54:c8:
47:8f:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:30 2025 by rpki-client