Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: zBjcBj6z3K6pbeshfUfdYb9hLs0hhyOS5Fw/CNS0DB4=
Subject key identifier: 2F:98:55:22:19:EA:5F:EE:3A:1A:41:25:3C:DF:E4:C4:E2:A5:E3:DE
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 0197D776BCAFE3A0F0C6BAA3BF27FBAE72EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0D2B
Signing time: Fri 04 Jul 2025 22:02:52 +0000
Manifest this update: Fri 04 Jul 2025 22:02:52 +0000
Manifest next update: Sat 05 Jul 2025 22:02:52 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: BKItinU4cWuJYPaxNhIg0sDA/+KH5zoKHHTMUo14d70=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 22:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:76:bc:af:e3:a0:f0:c6:ba:a3:bf:27:fb:ae:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jul 4 22:02:52 2025 GMT
Not After : Jul 5 22:02:52 2025 GMT
Subject: CN=2f98552219ea5fee3a1a41253cdfe4c4e2a5e3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e7:c5:16:b7:39:d7:ec:3c:04:d0:ee:d2:74:
6b:0b:e3:61:0b:57:7d:80:70:a6:84:61:52:a3:21:
ab:3d:53:a6:31:c8:cb:ba:5b:95:7e:3f:cc:39:a8:
24:a5:44:13:c6:43:ec:58:42:00:92:8f:8e:8e:73:
63:cf:95:20:69:5c:f8:7f:ff:12:8b:9f:38:a1:7e:
46:0e:59:b5:75:a5:e1:fe:db:2d:b5:ad:45:af:84:
5c:fc:12:12:a3:9b:66:03:07:f0:53:f4:07:07:31:
68:66:6e:92:ab:4f:3b:e4:b6:1e:31:bb:14:52:f5:
70:61:0d:e0:7a:1a:4a:bc:f0:63:95:ee:bb:05:ea:
f6:6a:fb:d0:4c:04:2e:5b:04:a4:7a:87:37:f0:a1:
27:85:5b:0f:4d:d8:2a:79:9f:65:3d:91:91:32:84:
a6:43:7c:c6:6f:98:4d:d2:49:26:54:a3:0e:7b:14:
2a:e0:1a:a6:31:55:db:98:72:0f:d7:c2:91:90:5f:
dd:af:d5:ba:95:a3:96:62:d1:14:51:91:b0:cb:fc:
66:c5:6f:d7:7a:61:cf:0b:3f:f8:5d:42:cd:06:58:
82:91:9c:f7:2d:11:22:5d:10:b3:be:de:1b:d9:30:
1e:23:f9:d4:88:6e:18:4d:b8:e6:19:01:87:fb:d4:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:98:55:22:19:EA:5F:EE:3A:1A:41:25:3C:DF:E4:C4:E2:A5:E3:DE
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:c8:52:d8:fd:c8:e3:ef:5a:88:0c:4c:7f:0d:15:9a:d6:
81:8f:0c:99:a6:20:9c:f3:c7:fa:c6:3c:e8:45:36:c2:66:4b:
7e:9d:ab:4b:f6:d9:ea:6d:d7:55:db:73:58:42:61:c8:f0:07:
b7:bb:ee:9d:18:22:fb:46:4e:e4:95:6f:66:2e:2d:91:0e:a7:
57:3d:b6:7a:4c:8a:a0:5e:e0:fa:c2:88:e6:e7:f3:4c:77:47:
85:43:12:57:ef:6f:cb:ae:e7:51:fe:f5:0a:fa:88:e2:b0:39:
ae:6e:99:b8:12:a5:d7:95:ab:5d:5d:6c:a1:fe:c8:91:9f:cd:
87:4a:13:62:a0:e3:1a:a9:36:45:c4:c2:dc:17:cd:b2:cd:a1:
b9:a5:5b:b5:5a:c9:68:fd:a3:a0:6b:fe:ac:a6:2e:6b:f5:ba:
dd:97:0d:c8:74:75:af:cb:33:bd:aa:f7:08:8c:c3:66:8a:ed:
72:76:c9:e1:1b:5a:09:db:18:3f:5c:e4:af:fc:db:df:6d:c6:
9a:30:df:ee:bf:59:c8:bf:ed:05:ba:7e:d4:bf:2d:82:61:6e:
e7:8d:c9:6f:87:f6:0b:ac:da:5e:85:ac:c3:64:2c:3e:3b:03:
ba:af:86:7d:a2:63:1b:d7:98:e8:22:14:d6:ff:fe:a9:f6:b5:
a4:47:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:28:17 2025 by rpki-client