Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: 8sAtkCzxDhnv/QT0K4GiBceS/Fc4DsxWheb+dDrCV08=
Subject key identifier: 12:4E:AD:16:98:D1:7B:6D:42:53:E1:11:C3:17:B8:89:8B:5F:02:62
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 0197C9146A8F9E6B29C535ED8DC52F130CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 03F4
Signing time: Wed 02 Jul 2025 03:00:47 +0000
Manifest this update: Wed 02 Jul 2025 03:00:47 +0000
Manifest next update: Thu 03 Jul 2025 03:00:47 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: jgAddwomSmS3ZW82jF3jKsXCUTkoPe0No3Tj0cvhAaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:6a:8f:9e:6b:29:c5:35:ed:8d:c5:2f:13:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Jul 2 03:00:47 2025 GMT
Not After : Jul 3 03:00:47 2025 GMT
Subject: CN=124ead1698d17b6d4253e111c317b8898b5f0262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:b1:fc:b0:18:57:dc:94:c3:ab:6f:d7:46:
e9:a1:31:e6:41:ce:22:38:ef:80:2e:4a:80:1b:2a:
61:87:e0:8c:33:6f:de:2b:ea:24:e1:52:6c:cb:cf:
c8:b1:93:f9:c3:1e:7c:65:dc:87:4a:37:69:82:09:
14:57:0f:d4:32:aa:e3:c8:86:03:20:9d:1f:1e:48:
3f:33:b1:48:4b:69:ab:c7:31:6e:d2:c0:21:47:87:
e8:a5:3c:07:93:18:fe:c9:9f:b7:28:dc:14:1b:0e:
ab:b4:58:14:10:c2:9b:24:7f:95:15:a7:e5:7a:43:
3e:90:c8:de:b0:d0:a0:b4:e4:3d:cf:d4:7f:78:5b:
57:60:76:5a:d2:1f:16:ca:77:7e:67:8a:0d:94:65:
d8:04:ad:cc:43:c8:23:70:0d:a1:ff:e4:d1:ab:bd:
6d:52:90:bc:a4:4d:6b:d4:9c:41:49:d5:24:b5:35:
5c:98:3f:05:6b:b5:23:64:0b:9a:f9:d4:87:7d:82:
11:f7:74:bc:c4:9b:38:32:ad:c1:8b:d2:9f:31:a4:
90:73:17:45:76:f9:53:6a:aa:21:fc:b0:37:e2:7f:
ee:55:6c:07:38:09:c7:a9:4b:58:20:d7:04:ba:04:
39:e4:b5:97:3d:e4:56:f7:b0:06:58:d4:41:8e:2a:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:AD:16:98:D1:7B:6D:42:53:E1:11:C3:17:B8:89:8B:5F:02:62
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:0e:12:38:52:b3:0c:00:81:9e:df:a2:14:e6:e6:96:01:
e3:9c:23:68:09:56:94:75:8f:d1:a1:4e:da:ad:54:63:e4:81:
a3:bc:ec:60:71:8a:6b:06:7f:f5:54:86:3e:06:49:ed:76:d5:
b0:62:e1:77:a7:49:db:13:4f:b8:73:7f:63:21:36:88:69:40:
7d:42:e3:d7:a2:03:f8:11:24:df:f9:bf:ee:40:17:e4:85:c7:
e3:7d:b8:55:7d:a7:aa:03:16:d2:a1:87:09:2c:8a:a1:94:51:
2a:b7:28:97:18:26:18:4e:1c:c3:fd:66:2b:d4:83:4f:aa:2f:
04:e8:2a:6b:b2:55:2a:f6:49:df:aa:38:7d:de:5a:63:c5:d8:
85:d0:e0:81:20:a1:b6:05:0f:a0:fd:06:b6:3d:85:90:de:30:
65:a5:91:ab:95:88:fa:e7:27:3b:5b:52:e2:8e:45:a9:ea:88:
a9:3b:02:4c:d4:88:1c:9c:b8:63:5f:59:17:8d:aa:69:f3:c0:
5b:56:95:39:04:4d:7f:19:e1:a7:25:f0:c0:42:11:17:51:2d:
e5:d4:79:98:8e:38:05:88:c5:78:97:47:67:3a:5f:01:4e:ce:
8c:a1:b8:0b:78:64:34:69:aa:a8:0a:76:c6:ac:31:1f:19:72:
8a:3e:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:21:31 2025 by rpki-client