Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: 1c0r3BgEFg9yrqOYmlZrCPDVzbKuvVKW1bIIGoGtf2s=
Subject key identifier: B8:D2:29:1A:2D:7B:3C:80:3C:E9:22:57:01:4A:BC:E4:54:17:35:5F
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0198462DA8CD7B87AC0021E69F0CBF670E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 10:00:53 +0000
Manifest this update: Sat 26 Jul 2025 10:00:53 +0000
Manifest next update: Sun 27 Jul 2025 10:00:53 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: Ag2MSbtEHjhQOuUuGdhB8cS7o8SSCfCY06Bm5sYYs2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:a8:cd:7b:87:ac:00:21:e6:9f:0c:bf:67:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jul 26 10:00:53 2025 GMT
Not After : Jul 27 10:00:53 2025 GMT
Subject: CN=b8d2291a2d7b3c803ce92257014abce45417355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:e8:72:61:f9:62:fc:9c:aa:4f:d2:90:e4:
bc:1a:6a:e8:67:e0:6e:90:90:be:9d:8b:bc:17:33:
c9:4a:c4:0b:db:e4:4d:05:06:dd:af:5b:1f:43:e0:
fb:6d:d4:8c:bd:11:09:12:c0:05:47:77:50:66:c2:
81:92:79:bb:56:9a:47:11:ce:a2:a5:a6:93:34:1e:
d2:1e:50:e9:c4:75:80:fb:8f:e7:e7:3f:8a:db:4a:
75:b7:16:e8:03:cc:48:d4:06:53:90:b3:72:6d:6f:
17:49:69:d2:38:b5:21:1a:47:5f:16:85:71:cf:60:
83:1a:70:0f:5f:f8:3c:9c:d6:25:8a:24:02:18:76:
ef:11:5d:b9:21:df:5b:ee:e5:7e:d8:26:48:88:1e:
a9:b6:4e:8d:c3:35:46:b8:3d:ec:8a:63:13:21:2d:
48:93:13:f4:8e:ac:69:1f:36:82:57:b9:d2:93:9f:
5a:00:dc:f0:46:a6:7b:84:09:94:8f:43:4b:1d:03:
75:2c:18:db:07:2c:48:5d:f2:8d:2b:bf:db:c0:e6:
33:cb:ca:04:6e:4b:b3:94:4d:05:94:cc:b9:c5:0d:
c8:9f:06:31:fc:33:73:3a:33:6f:5e:53:d7:d2:86:
32:3b:b2:97:71:42:e3:15:81:42:13:4f:58:10:3f:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:29:1A:2D:7B:3C:80:3C:E9:22:57:01:4A:BC:E4:54:17:35:5F
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:52:4d:4e:ac:f0:e0:3d:ea:ac:16:03:4b:03:30:8e:b9:fe:
ee:e4:a9:43:78:96:e9:97:15:d1:0b:f3:ec:8c:9b:ed:6d:ba:
39:f5:ed:64:ad:36:e5:6d:ea:5e:20:05:86:85:22:45:a0:7b:
15:7d:5b:a0:ed:16:99:53:86:37:35:4d:b0:44:27:a9:f2:ed:
6a:d0:e1:95:1d:2e:57:61:62:36:7d:bc:2e:98:ef:25:9b:b0:
5d:d3:d0:55:71:a4:87:41:3b:2e:1c:f2:29:14:e3:09:cd:84:
63:1c:71:f8:26:18:d0:ae:7d:87:d3:13:8a:cc:86:2a:db:27:
77:d1:09:6e:f8:f6:ac:68:44:26:22:57:88:dd:2c:7b:75:e3:
d7:7f:6b:ae:1b:bc:1b:92:4b:3d:23:e0:24:51:2f:21:fe:6b:
de:14:d8:c3:4f:c1:9b:70:61:97:93:6d:a6:91:dc:df:8c:e0:
05:ab:e3:da:4b:0f:07:46:e5:8c:01:31:0a:6e:53:84:ed:6e:
32:c7:cb:53:0b:c9:5a:4a:c5:34:55:07:42:21:da:4d:4d:f6:
65:7c:df:f0:5b:f8:a9:ff:0d:b6:0b:24:48:ea:ca:28:0b:17:
05:d8:68:30:1c:73:e7:7a:64:7a:99:42:43:ed:83:42:05:1c:
89:27:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:04 2025 by rpki-client