Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: wfEWPhseoOZ5VE12x2Yo6evkr3HzDKoLvrVUQ/rbW7E=
Subject key identifier: 1B:F8:14:EC:15:DA:1B:07:2A:E9:8D:F4:51:0B:62:C2:97:92:C8:73
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0199326DB18F38A8B4526B364ECDD6E5645C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0E53
Signing time: Wed 10 Sep 2025 07:01:13 +0000
Manifest this update: Wed 10 Sep 2025 07:01:13 +0000
Manifest next update: Thu 11 Sep 2025 07:01:13 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: CxcprsE83fJpZHJmdrVDvojIPCOubSY/mEGkQF1/+5Q=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:b1:8f:38:a8:b4:52:6b:36:4e:cd:d6:e5:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Sep 10 07:01:13 2025 GMT
Not After : Sep 11 07:01:13 2025 GMT
Subject: CN=1bf814ec15da1b072ae98df4510b62c29792c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:93:7b:9c:fa:0a:b4:07:f5:8e:f0:d1:02:
26:ac:95:d3:44:f8:68:a6:ee:3f:08:62:8f:08:5a:
ff:63:21:ef:9b:88:1e:25:e0:9e:58:ff:03:01:f4:
95:f1:2d:f0:82:1f:98:15:a2:12:f9:1b:b1:42:98:
1e:e8:aa:f1:db:f6:df:0e:79:b5:22:4c:10:b8:4b:
99:65:d5:e7:63:fe:60:a3:9e:c9:12:bb:1a:5b:86:
e4:49:12:29:c1:13:56:f6:ab:5e:67:ec:da:57:f0:
ed:2a:3a:46:6e:93:73:ac:76:18:af:ea:bc:f3:fc:
8a:43:8c:82:b8:f6:f8:82:a7:f7:ee:a2:64:17:67:
c3:79:a4:ba:69:98:86:55:62:cc:62:65:87:4e:6a:
36:ed:a0:54:98:0f:e7:71:79:6c:1e:7f:81:30:8c:
10:0d:6a:1b:b6:03:05:cd:ce:47:c2:aa:a4:b9:e2:
0f:f8:05:8e:bd:65:b8:10:c0:bf:9f:56:4c:cc:5a:
78:4b:c0:58:ac:9a:66:e4:d8:b6:ca:1c:1b:e9:75:
32:c9:85:5e:1d:6c:3e:6c:b7:f3:7a:ea:85:c2:8a:
1b:f1:c3:18:20:bb:f4:aa:a9:b0:46:1d:2d:d5:6c:
65:39:3a:5c:9e:9b:6a:a0:66:13:0c:b1:75:2d:e1:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:14:EC:15:DA:1B:07:2A:E9:8D:F4:51:0B:62:C2:97:92:C8:73
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:a8:6e:13:86:2f:e6:d6:ed:4c:c1:29:ca:4f:8d:18:e5:
1b:25:66:33:18:b9:e9:81:24:1a:0e:28:ac:5a:c1:9c:d2:e3:
b1:ab:f4:1c:19:42:ef:d2:a8:6a:e2:0f:e3:d1:1b:87:c9:e4:
7b:5c:24:52:60:e5:45:45:ff:51:6d:4b:dc:57:fc:10:b1:0f:
d1:b5:2f:91:fd:48:2c:ef:b4:a8:fa:e6:dd:b3:aa:30:3d:b7:
fc:62:62:e4:a8:d9:85:82:8f:29:4a:c5:0f:1c:d9:57:83:c2:
60:61:55:52:46:7e:cd:29:43:ca:86:55:43:c7:bd:63:b6:3e:
ba:ba:64:7a:ef:7d:a6:f0:54:4d:11:3c:76:4f:1e:5e:71:d7:
a9:04:d5:d7:3d:e9:81:80:cf:18:91:e5:f8:87:cf:fa:f6:a8:
7a:51:b7:39:b1:26:97:d4:5f:6f:10:8d:c1:13:0d:81:96:bc:
71:25:d3:1d:8c:af:1d:91:c1:1e:60:71:6c:f8:9c:37:42:ea:
dd:a5:b4:67:88:5c:dd:02:e0:4a:0c:02:52:90:38:f0:9c:64:
5e:a2:f1:7b:ac:e4:12:7b:c2:e9:44:7d:1d:ee:07:ca:8e:4a:
f8:56:b8:86:65:ab:f6:df:ba:a7:86:4b:7b:4a:a7:bb:a5:e1:
11:82:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:21:34 2025 by rpki-client