Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: oAjSmuVqn23X+E9Gr21i7H+ktLxg3yZ8IgoBUkM2w+E=
Subject key identifier: 11:08:72:F0:4C:8A:81:85:91:87:F8:B6:5B:A4:A1:38:B3:72:04:F8
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019747E78388A8047BBBD666C3F404F82695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:00:44 +0000
Manifest this update: Sat 07 Jun 2025 01:00:44 +0000
Manifest next update: Sun 08 Jun 2025 01:00:44 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: sQ8KEdnRVcimhCMMb1vHCtSz9U4C1GIvzZwNgoy5nMk=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:83:88:a8:04:7b:bb:d6:66:c3:f4:04:f8:26:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jun 7 01:00:44 2025 GMT
Not After : Jun 8 01:00:44 2025 GMT
Subject: CN=110872f04c8a81859187f8b65ba4a138b37204f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:00:78:e6:47:a3:80:4b:76:d3:31:81:fc:
5a:74:c6:da:1f:5d:14:78:88:b5:35:b9:c9:ef:1a:
64:4f:32:6d:b8:6c:78:07:e6:b9:98:c4:a7:22:1e:
99:e6:de:d5:e3:0f:4f:82:86:c3:c8:75:50:64:82:
4a:66:a3:e7:bd:49:c4:d8:3e:22:c6:a7:ec:60:5b:
8f:99:e0:25:cd:a7:d5:c6:2f:04:a9:e1:f5:d6:ac:
51:95:27:a3:eb:89:6d:6f:ed:21:7e:7a:9a:27:a1:
89:cc:bd:08:e2:df:70:8e:52:9a:be:93:5e:61:65:
51:ce:a4:07:cc:ce:6f:76:b1:89:40:ce:15:52:50:
b3:eb:67:c5:5a:2b:8a:d6:a1:05:58:89:c5:49:89:
d6:4f:ba:c7:75:01:4e:58:7a:e5:8a:28:24:21:da:
d0:bd:8e:6e:17:7e:fa:c4:d0:9c:4f:56:ef:b6:2f:
b5:45:38:ad:37:73:e0:12:70:55:77:48:4c:ac:d1:
d1:d9:96:f5:c3:2d:c7:55:b0:11:9d:90:c9:88:f2:
ca:b6:f1:63:80:f8:2a:22:64:65:36:57:aa:5e:d1:
a7:b1:ac:d8:76:4e:06:d3:26:7e:e5:3a:29:d2:f0:
98:6b:c5:36:8b:00:e8:21:3a:b4:d9:3f:0e:2a:03:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:08:72:F0:4C:8A:81:85:91:87:F8:B6:5B:A4:A1:38:B3:72:04:F8
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:0d:be:28:60:15:79:b8:e0:a6:67:6e:db:5b:a2:0d:89:
45:06:1b:39:0f:09:fd:fa:2b:ac:5d:b3:a6:60:1e:dc:dc:3e:
f5:c8:6a:7b:ba:dd:ab:7e:6c:ce:0b:20:97:d6:9e:53:8d:e1:
01:84:65:32:2f:b6:16:f3:e2:58:e2:c4:93:6c:c8:a5:6e:e9:
aa:5f:3f:c8:31:b4:73:b6:e8:9a:55:ca:fb:2a:41:8d:ed:80:
51:6d:c4:c6:9c:3b:7e:2e:0e:21:ca:e8:f4:0d:bf:30:05:23:
58:a3:f1:93:62:b8:27:fb:5b:6e:c2:3c:ca:de:ce:77:b6:1e:
f4:c5:9a:2e:67:3d:aa:68:d9:39:06:f5:c1:f3:44:25:86:04:
f4:31:01:0f:da:d2:61:f1:f6:d9:a6:2b:f9:58:fd:d8:bf:9e:
e4:19:52:88:01:cb:e6:72:df:cf:84:54:e6:0a:7b:3d:c3:1a:
1f:1e:6c:e9:60:6c:5e:04:b3:6f:aa:30:3d:de:8d:52:90:cf:
15:8a:7d:e4:1d:a0:4f:7e:ba:44:bf:b4:ce:fd:38:20:d4:c0:
ef:bd:fc:60:1f:6e:89:2d:92:a5:3f:22:6e:36:84:24:e0:76:
0e:75:f8:fe:34:49:dd:0d:cf:7a:5b:9e:36:e9:db:a8:22:25:
42:44:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:18 2025 by rpki-client