Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: smDtWwkJX1c0EnmjAVnZMDYVxkAQE9oSsqmIkh+jeRY=
Subject key identifier: C4:2F:B1:1F:5D:6E:33:72:9C:11:D5:28:D6:A5:E4:96:32:B4:24:7F
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 019921E76AEC2A1703AFA6E6ACC86E39165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0497
Signing time: Sun 07 Sep 2025 02:00:38 +0000
Manifest this update: Sun 07 Sep 2025 02:00:38 +0000
Manifest next update: Mon 08 Sep 2025 02:00:38 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: Iy79ZMj2bu6Wq6irwOZJ2smpRmUa6tpBXBVczvwsasg=)
2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6a:ec:2a:17:03:af:a6:e6:ac:c8:6e:39:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Sep 7 02:00:38 2025 GMT
Not After : Sep 8 02:00:38 2025 GMT
Subject: CN=c42fb11f5d6e33729c11d528d6a5e49632b4247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:46:64:3f:a8:1c:8f:87:46:64:ff:73:89:6b:
5d:9c:8d:6c:fb:e1:45:41:23:71:4f:f0:9a:21:eb:
9b:04:d2:f6:66:c0:52:e4:71:1e:c4:b6:f3:4e:4e:
59:d3:11:af:2a:32:ea:b9:d9:8f:4e:55:6d:36:88:
cf:0f:77:15:a8:52:70:e8:10:3a:85:77:64:ec:b0:
55:a9:8c:2f:a1:11:ea:e2:0e:57:c3:7e:f3:3d:04:
12:f7:ab:48:e0:0c:c4:7b:e4:33:98:8f:1b:76:84:
d0:2c:18:de:ef:57:15:00:3d:8a:45:fc:38:e3:5e:
18:b8:e0:32:83:39:9a:57:d2:3b:c1:dc:57:aa:f0:
0e:04:f7:c9:a2:0f:fb:3c:da:43:85:c5:8d:44:df:
17:d5:36:15:53:a7:7a:0d:cf:59:77:a7:bf:e7:94:
0d:52:ec:ba:9d:f1:84:18:e1:da:7b:ff:db:e1:29:
e2:10:8e:0d:53:9a:0c:b3:c8:6c:9b:2c:e7:42:de:
c9:fa:05:d4:51:4c:a0:e3:47:48:4a:dd:7d:71:26:
d9:01:56:5e:17:8f:38:40:79:ed:b0:54:23:8f:aa:
45:f1:80:80:ee:6f:32:a5:f5:46:d2:5a:d0:fd:96:
66:1f:f1:47:ad:a6:4d:d1:6e:cc:f0:ca:60:46:fd:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2F:B1:1F:5D:6E:33:72:9C:11:D5:28:D6:A5:E4:96:32:B4:24:7F
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e8:83:2f:a3:d9:80:ac:f4:c3:5b:a6:16:60:b7:ee:94:ca:
6c:60:c7:77:e5:a2:e9:e8:40:da:6c:04:17:26:d6:85:db:17:
5c:37:f0:9b:99:8b:d1:a5:bf:f6:78:c5:e8:c6:4d:1f:58:41:
49:34:d4:cb:93:19:93:6d:ce:6a:a4:4c:ac:fe:44:f7:37:4b:
6a:cc:af:c9:ec:fe:85:f6:8a:a9:f2:dc:0f:b1:88:bd:4f:f1:
4b:77:a8:9a:4a:d8:8b:95:18:f9:d3:c1:47:fe:88:6f:1d:41:
56:6c:83:8d:25:bf:ef:fc:4a:8d:02:89:69:10:78:9d:1a:be:
47:cf:6b:67:1f:b0:51:ae:ea:49:55:be:64:17:0e:99:33:6f:
2e:34:31:97:fe:3d:17:7b:04:bf:88:d8:d4:4b:a8:54:72:18:
02:22:a8:42:b8:67:b9:56:7f:8b:96:9f:da:f6:b4:31:a7:67:
a4:c8:c5:d0:10:27:64:80:24:30:96:b4:6b:79:63:90:79:8f:
ab:b1:bf:d1:f8:ab:d6:51:82:a9:11:7f:c3:72:3a:a1:b4:12:
53:df:ff:42:18:f0:f3:db:a8:83:70:5c:45:ab:19:f8:62:00:
d2:48:85:65:e8:d4:3f:92:91:d9:25:33:a6:67:b9:72:28:fe:
ad:f3:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:07 2025 by rpki-client