Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: lDK6FNdMMGgw8DB/J3xC2CmqqsZVvw+aErG3oBPZydY=
Subject key identifier: 0A:F8:B0:78:12:C2:6F:C0:74:F5:7F:9C:61:79:28:DA:30:FA:BB:D1
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 019845887DCBD69AE35E2AE55124F45454C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0206
Signing time: Sat 26 Jul 2025 07:00:29 +0000
Manifest this update: Sat 26 Jul 2025 07:00:29 +0000
Manifest next update: Sun 27 Jul 2025 07:00:29 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: 6a3bpc6XwQefHBOD27d281nIF7va/DyBdexTNhUvCvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:7d:cb:d6:9a:e3:5e:2a:e5:51:24:f4:54:54:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Jul 26 07:00:29 2025 GMT
Not After : Jul 27 07:00:29 2025 GMT
Subject: CN=0af8b07812c26fc074f57f9c617928da30fabbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:19:2f:a7:9e:f9:7e:be:9f:73:c5:4a:6e:
f6:04:0e:92:16:fb:05:93:3c:78:d8:44:a0:32:3c:
4a:d4:5e:c1:6d:9a:72:1f:c0:2a:92:70:e3:79:2a:
41:99:30:66:5b:3b:77:67:60:ed:38:7d:d1:c9:df:
3d:36:09:87:2d:2a:9a:d5:12:04:59:6a:3d:0b:f3:
09:81:f5:b5:fe:c3:a1:db:b7:91:a2:fe:7b:a8:68:
f1:e7:1c:48:2d:02:fc:a6:9d:86:b1:35:5c:94:fb:
13:96:6b:78:3f:4f:52:ef:05:e8:9d:e7:eb:c7:b4:
44:96:2a:40:36:3c:42:cf:b1:fb:66:34:ec:7c:25:
35:4e:44:ee:41:5e:e0:b9:92:a1:2f:63:ea:79:dc:
2f:09:c2:ac:d1:f3:8f:ca:8b:ea:16:82:d0:22:f2:
ee:bc:30:c1:8d:3b:15:e6:00:fb:5c:90:37:33:7f:
bf:ef:d2:1f:b4:67:aa:cb:a7:c9:a7:c1:ba:b2:8f:
16:3d:63:b6:a8:1e:3d:21:20:0f:16:9f:8e:ae:c5:
04:29:72:73:66:82:79:3e:5a:15:5b:94:cd:6c:ef:
36:53:ed:e1:08:f8:22:bb:9b:6f:aa:10:02:33:85:
b1:2d:2f:86:b0:4f:a1:98:8b:af:51:02:eb:4b:8d:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:B0:78:12:C2:6F:C0:74:F5:7F:9C:61:79:28:DA:30:FA:BB:D1
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7e:f4:b1:71:4a:ea:e8:f3:90:fa:65:be:3b:4c:04:0a:a2:
16:a8:54:e3:f9:c6:71:24:f9:70:47:bd:af:d0:e5:a0:11:40:
fa:de:b2:83:4e:98:c4:a7:30:ed:18:8f:c7:c4:5a:dd:ff:0f:
b6:b3:c0:fb:f6:37:79:70:31:79:dc:cf:e6:ec:42:23:f2:42:
a1:a2:55:33:c4:98:bc:27:10:f7:ed:b1:e5:7c:32:51:f6:4f:
26:62:bd:70:5c:44:26:25:a3:e5:62:c5:20:f6:45:a3:08:11:
7e:5f:4f:ab:b4:4e:94:b0:a2:44:7a:6b:70:be:b2:4e:b1:bf:
17:48:16:0e:1d:37:fb:ec:fe:72:57:9f:cf:c1:e9:66:dd:71:
c0:ad:95:85:0c:aa:ec:d1:e8:35:db:c9:b0:7b:a4:1a:aa:3d:
f6:29:27:16:81:00:8e:82:1e:3d:a1:29:a4:e7:3a:25:c3:37:
d4:23:a0:4a:f5:f7:4d:99:e1:49:33:fb:a9:8d:98:d4:f0:eb:
c4:08:74:f5:f4:23:59:83:96:44:0c:16:65:da:34:e0:a5:27:
29:76:0d:82:85:ac:b5:d3:8d:75:75:f3:42:96:5a:6c:1e:27:
a1:28:f8:23:c5:b3:ec:ea:7b:20:bf:3e:e3:f7:49:7d:d3:2e:
99:c4:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:04:34 2025 by rpki-client