Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: LrWUmMv/4HxKoCS8qKIvWXlZjH2+GuV7dLft6vXiick=
Subject key identifier: CA:FF:8B:BF:0E:EE:24:3C:22:CB:A3:85:6B:1C:6B:83:48:7E:9D:BB
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 019922C339164C60B88F1E14836A3D383CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 04A7
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: NZlVMY2nuRHO7dABwueK8i0snx2DE+hlpzSTLButJh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:39:16:4c:60:b8:8f:1e:14:83:6a:3d:38:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=caff8bbf0eee243c22cba3856b1c6b83487e9dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:e2:90:c3:cc:aa:ed:af:f5:57:82:a2:81:
09:49:c4:d8:d5:65:06:e8:9b:27:b9:b0:ff:f6:c1:
dd:8d:37:04:77:18:b4:97:e6:0d:0b:8b:9e:14:ad:
38:e0:27:80:4a:59:ef:b9:d9:3f:ed:c3:ee:45:ed:
f5:21:be:78:e6:c7:e6:74:91:86:2d:fa:9e:b8:5a:
08:b5:a7:8a:b9:1c:0e:23:14:db:6d:a6:ec:36:be:
ad:d4:d7:18:7b:6c:77:26:c1:3e:81:cf:e6:bc:04:
f2:97:86:89:12:a5:f5:3c:8a:e8:1e:c3:79:04:1f:
59:d4:67:27:02:59:da:00:a6:91:1b:98:fa:c8:7b:
60:a0:4d:a0:0d:18:69:14:77:c9:01:61:15:29:29:
54:13:67:19:c1:d8:c4:e6:4f:35:88:3a:7a:05:d5:
6a:24:0a:40:cf:b3:67:fd:31:2e:05:5f:5a:9b:d3:
d0:eb:e6:15:d4:ae:f8:14:59:cc:5c:b2:b1:87:9b:
06:64:05:a5:cd:1a:0b:6b:81:98:03:bc:96:6d:0b:
58:de:46:b7:91:17:bf:0a:f4:9d:03:39:50:ba:b6:
4d:a0:95:c9:d1:a4:e9:fc:ca:20:e7:57:95:2e:db:
86:8c:c6:71:05:37:7f:0a:28:94:88:61:f1:cc:03:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:8B:BF:0E:EE:24:3C:22:CB:A3:85:6B:1C:6B:83:48:7E:9D:BB
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f0:6f:75:1d:04:0c:be:69:6d:92:c9:c6:b2:8a:9b:54:b9:
40:92:90:90:d1:ba:ea:96:40:c8:93:af:71:c7:46:4a:34:92:
4a:9e:ab:92:cc:ad:2e:fe:5c:72:e1:d7:6a:e9:e3:a4:a7:18:
a8:b3:58:2f:71:73:87:3b:b8:5b:ed:24:76:e1:56:a5:d5:5c:
e1:3c:2c:06:58:9b:0b:d7:60:6b:f9:af:07:95:87:af:d7:e9:
61:f9:81:24:0f:fb:8e:f5:25:64:b9:99:b2:19:1c:d1:29:fa:
54:6c:ac:19:d9:2a:04:78:58:cc:bf:fd:b4:4f:23:11:f0:12:
7f:9e:f3:dd:3a:51:a4:7d:7e:02:db:4e:28:8e:48:04:49:f0:
10:53:dd:cb:81:26:57:32:62:63:89:4f:23:6e:e0:2b:b1:89:
5e:fb:df:79:44:e0:4b:ee:79:cc:4a:55:d5:0f:37:02:8e:86:
ee:f9:00:5e:f4:db:76:88:cb:92:72:51:69:6e:e7:9f:d9:e9:
c0:33:f7:a6:e5:c5:cf:3f:7e:33:b4:56:42:69:d1:36:8b:cf:
e7:3a:a4:ee:f7:fc:76:eb:49:83:6b:7c:cb:cb:c3:b6:87:0d:
f6:2e:90:a3:be:5d:05:d3:96:ea:a6:28:08:97:ea:3e:2f:f7:
38:4a:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:17 2025 by rpki-client