Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: f/Eju9+wP/j3rpTSGiOU11DaC4kSBQpKeIM1esDKAAw=
Subject key identifier: 86:D3:E4:07:8C:03:E1:43:BE:12:E8:AE:0C:A7:BD:3C:31:36:33:E8
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 019749D5C414B4AAB1D41C6EC875CA9610EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0D56
Signing time: Sat 07 Jun 2025 10:00:35 +0000
Manifest this update: Sat 07 Jun 2025 10:00:35 +0000
Manifest next update: Sun 08 Jun 2025 10:00:35 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: g4gRFojabUDfjxU0tXdVid7Wq4QG9QF+484fbuiHVXk=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c4:14:b4:aa:b1:d4:1c:6e:c8:75:ca:96:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jun 7 10:00:35 2025 GMT
Not After : Jun 8 10:00:35 2025 GMT
Subject: CN=86d3e4078c03e143be12e8ae0ca7bd3c313633e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:04:00:03:71:b8:b2:9a:4b:e0:66:f5:b4:
0c:53:85:14:33:78:1c:66:23:82:d4:48:3d:3b:d1:
48:2d:18:f4:06:6a:3c:62:0b:dd:61:ad:af:a8:43:
20:55:29:7a:eb:1d:10:19:42:4a:4d:79:8a:48:9b:
ed:d6:d0:27:b9:b7:ff:1b:70:a0:3c:0b:89:a8:90:
b2:67:33:7a:93:dc:20:4b:b4:f8:8a:35:01:90:67:
6d:e1:32:a2:2f:4b:d8:25:e5:33:b6:02:94:f9:84:
fc:da:37:17:29:1d:6a:00:67:04:1b:ff:ed:9f:d2:
35:34:40:e2:0c:98:f6:34:b5:1c:16:e9:53:51:ee:
7b:40:de:b8:c7:96:d2:0b:1c:53:b3:04:ce:bb:52:
3b:44:1f:a3:77:17:cc:a6:54:02:90:32:e3:3b:85:
31:ab:e5:a0:ae:0f:1b:38:a6:80:92:9d:7a:a6:90:
ab:96:1f:fb:f4:3a:fa:10:aa:20:5b:8b:c1:00:63:
86:7d:5b:85:da:17:f4:82:ff:bc:1c:31:39:0a:a7:
ef:95:6a:f7:a7:47:af:83:b7:c4:58:c9:04:fb:f9:
94:4a:0d:e9:3d:1c:b7:d4:c9:bb:2d:14:f7:5c:94:
a0:ae:d6:0e:fe:f8:61:ef:0a:ed:1a:3a:af:27:e6:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D3:E4:07:8C:03:E1:43:BE:12:E8:AE:0C:A7:BD:3C:31:36:33:E8
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cd:c2:9a:32:a7:99:98:f7:8b:5f:48:62:cc:53:3a:28:3a:
67:65:cc:d7:da:d0:dc:44:55:c0:d5:60:06:5d:76:3b:22:99:
a1:e8:e0:2f:f6:9b:da:26:53:e2:db:58:44:2d:c5:41:26:00:
4c:8b:1f:e8:01:ea:bf:62:b5:07:a7:40:73:83:0a:1c:3e:40:
15:83:22:f7:f6:65:e9:c6:10:49:df:20:3b:f2:61:6a:19:8c:
43:71:6a:88:07:da:9d:4d:22:b0:a6:c1:70:25:1d:00:7b:11:
83:45:7a:6a:d2:7b:07:d2:c5:14:b5:ff:b1:dc:d2:84:15:0e:
ba:d3:8d:ec:71:99:e3:f6:50:99:32:2a:03:f2:10:8f:d9:04:
f8:8f:75:2f:f4:a1:fc:a7:eb:9b:c4:10:71:0f:e1:91:dc:bf:
f4:13:76:a8:01:35:b7:c6:27:46:4d:56:56:cf:84:3d:4c:6e:
4d:2c:c2:69:f7:cf:98:47:65:04:b1:6f:cb:1b:01:63:61:0b:
1c:89:60:30:bc:79:09:ef:23:11:6e:95:55:22:30:1f:10:60:
53:64:86:2e:11:13:65:c3:20:dc:9b:0f:04:7f:f2:25:c5:19:
e6:09:31:5a:03:66:df:ea:8b:04:86:e2:94:e7:64:68:01:5d:
a4:e4:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:19:12 2025 by rpki-client