Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: +ZQzMvHXLqg2kSgfp9/FmRRr42Gka+lcR5fl8Z92anA=
Subject key identifier: C9:17:3E:89:DE:7B:28:EC:4F:B0:70:F7:C4:10:8D:7C:C7:6B:BC:71
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 01984AE595E59D83D26E69954921C4099C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 11A1
Signing time: Sun 27 Jul 2025 08:00:16 +0000
Manifest this update: Sun 27 Jul 2025 08:00:16 +0000
Manifest next update: Mon 28 Jul 2025 08:00:16 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: cb9yVXLzq6r7Je85OUKN0A7CikN+9Tt7Dvb1bEGOBIo=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:95:e5:9d:83:d2:6e:69:95:49:21:c4:09:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jul 27 08:00:16 2025 GMT
Not After : Jul 28 08:00:16 2025 GMT
Subject: CN=c9173e89de7b28ec4fb070f7c4108d7cc76bbc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:c2:4b:3f:ef:cb:2a:a7:c2:ad:14:18:92:
84:e0:00:15:ae:b2:0d:bd:51:f7:ef:44:2b:16:b0:
c2:57:08:1c:a2:73:fb:64:6a:5a:13:76:fd:48:45:
51:48:e5:01:f6:93:6c:c5:9b:c5:7d:a6:c0:fa:dc:
27:1e:01:bc:74:ad:2c:06:a9:cc:1a:38:2b:25:37:
54:6e:7d:64:e3:9f:19:1c:26:bd:4c:a7:ee:53:b8:
4b:09:2a:89:cc:d9:b6:c2:f7:cf:b2:78:8a:da:02:
1a:18:cd:f9:9a:48:27:b2:5b:44:01:e0:bf:ea:4a:
68:a5:e1:3d:d7:e7:0d:ab:c7:12:56:f6:03:28:5b:
8f:08:5f:74:40:e6:2e:f9:d2:92:98:89:c7:3a:49:
0e:a8:90:86:97:4f:4e:ca:a1:d7:aa:20:2d:3a:8a:
db:56:9e:5a:f3:cb:e2:ac:9b:ae:8d:0f:80:bb:52:
33:e1:ff:15:05:79:94:23:9f:c2:19:26:ab:2b:86:
58:dc:88:9c:dc:5d:5e:3b:da:f1:91:af:40:8e:7f:
9f:69:40:a0:ad:05:0c:8e:30:34:35:4c:30:4b:ad:
dd:e5:25:dc:2a:a3:79:9c:6f:65:a0:9e:ea:a7:d2:
f0:f0:98:ca:86:b0:ee:b0:57:1a:f0:4f:48:05:f3:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:17:3E:89:DE:7B:28:EC:4F:B0:70:F7:C4:10:8D:7C:C7:6B:BC:71
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:c7:4f:73:40:ea:15:1e:cc:c2:64:78:b4:4c:d9:d7:b1:
bf:ab:c3:25:8b:c3:77:18:87:d5:1e:8c:67:91:59:40:aa:6c:
c9:fb:20:dd:0a:fb:8c:7b:01:75:da:a1:3b:36:18:3d:52:3c:
08:c8:6b:59:8c:33:d7:bd:4a:69:90:3c:37:98:42:6b:7d:e6:
30:69:8f:a8:68:3f:e2:9b:34:01:88:2e:9e:88:8b:74:8d:52:
1f:ae:d6:7f:6e:fb:ca:fc:51:7d:ea:0b:76:ee:c0:d6:45:67:
fd:d8:a7:fb:bd:fd:df:17:b3:62:69:27:f0:5a:4a:38:93:42:
1e:81:dc:b5:01:a1:5f:e7:fc:2b:8d:e9:09:5a:c4:9f:57:79:
ec:be:ed:07:4a:99:1d:55:50:f3:c7:15:e5:b9:1b:58:4b:c7:
f4:c1:93:a3:21:9b:55:8a:c0:86:17:97:e5:51:98:23:b3:bd:
bb:20:04:88:12:6c:48:71:dd:9e:7e:f1:b0:d9:0a:9f:83:60:
1c:e6:4b:ce:dd:61:24:03:82:12:42:f6:cd:b8:b3:c2:75:33:
f6:c9:1e:30:24:5c:d2:0e:c5:db:0e:44:6a:42:a2:83:75:62:
49:de:4b:b8:ec:98:5e:df:9c:b7:d0:36:b6:cf:69:ea:88:fd:
45:6f:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:09:58 2025 by rpki-client