Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier: GIt4s2axX0Z3vmU73Zr7FpMWUKD269wtB4M2JssIVNI=
Subject key identifier: 47:80:C7:04:72:1C:1D:A7:04:C3:F1:C1:B0:33:4E:A9:3F:9A:71:CF
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 019936F02CF3AD9E122F1E4766FB61CF8783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number: 0AA2
Signing time: Thu 11 Sep 2025 04:02:13 +0000
Manifest this update: Thu 11 Sep 2025 04:02:13 +0000
Manifest next update: Fri 12 Sep 2025 04:02:13 +0000
Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: s/rf/vRAXPiaxq0seFJbA4/DT0QLtfsPtDfme6NqBiE=)
2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:2c:f3:ad:9e:12:2f:1e:47:66:fb:61:cf:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Sep 11 04:02:13 2025 GMT
Not After : Sep 12 04:02:13 2025 GMT
Subject: CN=4780c704721c1da704c3f1c1b0334ea93f9a71cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:5a:8b:92:90:69:64:c1:fe:ed:62:37:f3:
41:c0:a3:89:2c:47:60:92:82:f4:b0:ad:43:17:23:
c1:9f:f4:ba:5d:56:e1:cd:e4:d3:5a:43:a2:b1:f1:
0c:bb:a5:4d:9d:e1:62:7c:24:80:4a:7f:fa:4a:b5:
cf:5e:fa:24:d0:8b:61:e9:d7:d0:94:61:67:3e:85:
a9:16:16:7c:73:f4:3a:39:65:44:d3:e4:f3:40:a4:
7f:f9:15:55:ff:1b:37:86:41:26:42:df:12:e9:a9:
7d:7b:05:c7:a3:df:99:5b:5b:b4:c9:d5:84:39:86:
b7:96:99:d4:c2:92:1c:68:d7:fd:27:bd:37:fc:a0:
ef:4f:19:0a:de:7b:98:a5:fb:fc:4c:a5:87:3b:6f:
3b:92:4e:56:55:2e:fa:58:fc:99:57:f7:68:54:78:
3e:a4:2d:fb:b5:e4:62:a7:e0:33:8f:42:ab:71:0d:
98:93:81:22:aa:a0:20:2e:eb:64:6e:67:7e:d9:58:
5b:4d:aa:77:4b:dc:d4:75:2a:bb:d4:e5:aa:3b:b2:
51:b4:7d:64:53:bc:13:ed:01:fd:70:3d:44:0b:d9:
50:3b:4a:0e:d5:ac:3b:6c:01:44:15:c2:69:0e:ab:
ef:a2:f1:a8:b1:63:3e:0d:b5:4a:df:09:9c:78:5a:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:C7:04:72:1C:1D:A7:04:C3:F1:C1:B0:33:4E:A9:3F:9A:71:CF
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:64:07:11:46:5a:c4:d0:87:93:78:e6:56:74:41:1b:32:
67:63:1f:16:b5:70:af:3b:c6:8f:a0:47:47:71:95:18:89:b4:
20:33:fa:f0:23:f2:3e:8e:0b:87:a0:5a:1b:fa:55:48:89:86:
87:d4:e7:2b:d0:ef:0d:e7:3e:16:03:32:37:d8:29:65:bd:7f:
cf:db:de:65:37:13:70:4f:10:18:b2:5d:37:51:15:5f:34:f3:
49:b2:59:d2:81:fd:41:54:21:8c:44:47:c0:d3:54:7a:93:60:
e2:9d:9d:d5:26:4f:13:3b:48:63:16:d2:fc:16:7e:9a:be:19:
57:ac:70:cf:34:d6:ff:15:b3:d3:f1:65:1a:28:33:5a:eb:7c:
24:80:96:ba:1b:5d:e7:52:09:fc:35:db:00:c4:98:aa:76:dc:
d1:e1:5c:a4:63:86:18:1e:b5:de:1a:90:62:ab:35:ba:63:de:
6a:0d:58:a4:14:42:bb:9a:f7:f0:9b:8f:3b:de:21:3d:d0:c2:
b6:55:8f:92:a7:4d:f1:6c:d2:e3:c7:d1:de:3d:c6:a6:d8:dc:
35:87:08:a9:e0:f5:e8:ec:7f:61:d4:75:6a:d5:1f:fa:23:4e:
60:64:83:95:15:02:29:e5:13:2f:fb:cd:d6:86:0e:08:13:b4:
07:56:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:00:14 2025 by rpki-client