Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: hwFvLY1CEALC4vmRjpmJhqrspo9G3OwEEY5Ww0WVMPE=
Subject key identifier: 63:C6:09:A3:E3:9E:47:52:58:E5:22:0A:B9:FC:B0:A8:A2:0C:18:C4
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019853B19C0F0A1709AC46ED9BECCE91646B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 160D
Signing time: Tue 29 Jul 2025 01:00:05 +0000
Manifest this update: Tue 29 Jul 2025 01:00:05 +0000
Manifest next update: Wed 30 Jul 2025 01:00:05 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: mEnEnOBKhXbrm9KNvbaMW/f2mXieMNGHkmlBo/d6/Ak=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:9c:0f:0a:17:09:ac:46:ed:9b:ec:ce:91:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jul 29 01:00:05 2025 GMT
Not After : Jul 30 01:00:05 2025 GMT
Subject: CN=63c609a3e39e475258e5220ab9fcb0a8a20c18c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:fb:ee:80:6c:50:00:75:d7:9a:f9:db:9e:
15:d4:9a:86:17:58:d4:d1:21:15:8d:74:35:37:91:
1c:47:d1:d0:22:6b:51:88:d2:77:88:f1:f3:09:a0:
e4:20:b6:51:9c:86:11:5f:ad:2d:b7:50:ed:a6:ca:
45:0a:e6:aa:3f:03:61:a7:26:73:a2:78:d4:72:dc:
1e:b9:de:6d:d3:cd:aa:4a:96:09:da:0d:05:29:f6:
68:66:53:96:b3:eb:91:49:8d:60:6c:cc:b8:a9:70:
28:4b:76:18:5d:81:03:23:15:5f:2b:11:5e:0e:e6:
6b:ea:63:aa:40:b8:13:9b:36:69:8b:fa:ac:1a:9b:
eb:10:2f:28:8f:ca:bd:14:48:91:75:eb:c1:48:85:
d1:bb:c3:3b:dd:56:5a:81:99:ae:19:13:14:4a:8d:
58:03:5e:89:0d:a3:9a:3e:27:5f:e6:ef:4b:f8:37:
d7:e8:be:1b:b6:aa:08:6e:ca:82:e5:06:3c:a0:4a:
18:b2:34:49:12:a0:ca:50:bd:e7:54:0e:ad:f8:5a:
ca:c9:c4:bc:e2:3e:e8:04:d7:c7:6a:64:18:48:e2:
ba:0a:43:b2:97:92:7b:32:eb:4c:88:1c:5b:c7:db:
82:69:4e:80:bf:d9:85:ff:54:e9:33:d8:c6:d2:e8:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:09:A3:E3:9E:47:52:58:E5:22:0A:B9:FC:B0:A8:A2:0C:18:C4
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:ee:2f:8f:b2:1e:33:2c:c0:27:67:02:ac:ea:07:23:5b:
8b:1b:21:48:5d:ca:ff:1f:87:23:20:b5:6a:a0:64:02:30:0a:
3d:d6:ec:44:02:c1:6a:1a:20:18:5a:e1:2e:38:dc:ba:bf:37:
f7:2a:65:a0:2e:c3:c6:21:32:ba:6f:61:67:07:d9:75:30:c3:
00:b1:79:04:fd:63:41:dc:97:10:6b:ed:40:89:f5:5d:b4:ed:
30:53:7e:59:f0:af:b9:e8:1f:d1:80:47:0f:22:26:4a:e5:86:
2c:01:63:9b:b6:7d:87:c0:66:3b:3b:98:c9:68:be:27:e9:65:
b4:07:0a:4a:8f:5c:77:da:39:90:ba:14:a5:05:96:48:2d:e9:
f2:65:52:35:59:3f:1a:d2:0f:9f:85:92:ee:7e:af:a2:a9:e5:
e7:ff:17:ee:0f:fd:dc:07:e9:61:2f:56:1f:2f:2b:39:d1:00:
48:eb:f1:00:9e:4b:a9:7e:6c:92:52:a1:69:9b:fd:e0:f0:77:
f2:77:b2:f4:b9:71:63:e0:5d:a7:85:ab:bf:91:d4:ce:c6:9c:
1c:ad:01:63:8d:13:32:6b:fb:da:d3:ac:62:4d:aa:aa:b9:0f:
2a:54:f6:e1:97:8b:a7:72:fa:80:02:49:46:b4:10:d2:45:96:
f2:64:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:49:42 2025 by rpki-client