Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: Q/jZpPpJccLgYtUcaCVsvDl4Z6FyzltOhDHPz9pBBK4=
Subject key identifier: F9:0E:BB:7D:24:80:E9:44:09:EF:5C:D3:C2:59:1A:F0:A7:66:D4:B1
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0197496844AF5CD14EB52D9EC8C1BE0F5F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 1029
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: MFSxYIATS81Ei3Rp/jmTIbG2w5EjZibOKy23Hn9oubE=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:44:af:5c:d1:4e:b5:2d:9e:c8:c1:be:0f:5f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=f90ebb7d2480e94409ef5cd3c2591af0a766d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:f5:a3:e6:7e:9e:07:58:b9:4e:02:22:db:
5a:d3:ae:0b:4d:c0:d6:9f:b4:3c:0d:a6:8a:c4:8b:
1c:12:1a:f6:fc:82:01:cd:64:81:ad:0b:9a:d3:5b:
15:63:a7:62:f6:c6:be:43:71:e9:7a:a2:94:ed:cc:
f8:59:0b:46:9c:07:87:ef:51:63:0a:2e:9f:24:cd:
99:1e:2e:c6:43:cb:1c:bf:d6:91:0d:9f:d0:74:c3:
2b:65:1d:4a:73:31:fa:f0:77:39:44:dd:76:b6:2b:
a3:07:e9:46:d6:cc:ed:6c:ff:76:ee:a2:09:42:d6:
ed:5f:76:2a:f9:2e:4b:77:a2:74:ac:77:6d:ef:93:
25:ec:f5:ac:cc:37:ac:86:0d:a5:1a:48:84:1c:bb:
f7:e6:fb:94:75:a4:59:28:41:bd:01:96:f6:1d:9f:
2d:7d:18:b1:ef:7d:32:c2:15:01:96:fd:4d:d8:ca:
57:1f:8f:4d:aa:d9:6d:c4:64:92:78:68:eb:eb:3b:
b4:1f:a5:55:39:60:7d:9b:67:62:08:05:57:57:ea:
b5:dc:8b:a2:1b:23:06:a2:0b:8f:b5:f6:b8:de:28:
2e:03:08:31:4e:91:e7:89:5a:c6:96:6e:fb:96:1d:
5e:4f:29:2c:a3:a3:21:cc:18:8d:56:9d:c8:f3:1e:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:BB:7D:24:80:E9:44:09:EF:5C:D3:C2:59:1A:F0:A7:66:D4:B1
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5f:dc:8d:ae:9f:73:ab:1b:5a:7f:8c:e8:81:71:21:8d:40:
66:d0:cd:44:04:6a:37:b8:3d:c0:08:90:a4:c8:87:32:e9:b5:
ef:41:b8:e4:a4:00:83:3a:81:bf:99:f7:21:17:ce:ea:bf:db:
10:67:28:82:5f:22:08:8a:79:7a:6e:0a:6d:79:4a:91:9e:87:
47:6f:3c:c3:56:bb:3d:e7:b1:37:b9:b2:fc:e9:39:72:74:7a:
c7:0d:d4:05:6c:e2:5d:bd:29:c5:f4:5c:5d:b1:59:d1:c2:c0:
ad:27:e4:20:c8:b8:51:19:ec:05:e4:fb:51:7a:14:91:3c:0a:
7d:97:d3:12:67:67:0e:63:7a:20:90:f7:a2:f5:70:74:ca:0d:
de:1b:b1:db:71:7f:7c:4c:c4:33:f0:6f:f2:38:aa:e9:71:a3:
8e:6f:02:d9:db:27:56:f1:41:a1:22:60:7c:19:48:93:7f:16:
d0:0b:b8:23:64:56:a6:5a:74:21:9d:be:5d:17:18:8d:f3:2f:
c7:c2:39:73:f7:6c:61:d9:b0:60:aa:89:bd:77:78:0b:94:d1:
5c:ec:a4:d3:a5:77:38:8c:11:45:dd:0f:bb:45:4c:01:46:d4:
2d:19:a7:4b:1e:55:22:9a:75:cd:e1:59:fc:90:03:9b:21:9d:
7e:9a:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:36:45 2025 by rpki-client