Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: 58C0YcHok6DyxmArR4Anw7DsQb/I4Si9nieAjTiRRrY=
Subject key identifier: FD:75:8E:DF:98:AA:21:57:8B:A0:62:70:A2:9A:BA:23:33:79:D6:C7
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019933B789C345BB907B05A9EB4073055B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 13:01:30 +0000
Manifest this update: Wed 10 Sep 2025 13:01:30 +0000
Manifest next update: Thu 11 Sep 2025 13:01:30 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: RJ4xgsLDPrPOKIYLGLWcTJ9VU2wz6ufO+X4wGOOO84Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:89:c3:45:bb:90:7b:05:a9:eb:40:73:05:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Sep 10 13:01:30 2025 GMT
Not After : Sep 11 13:01:30 2025 GMT
Subject: CN=fd758edf98aa21578ba06270a29aba233379d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:0a:69:1c:94:5e:fc:7b:47:66:19:a9:18:
26:b8:11:66:19:b1:ab:5c:e8:6c:84:56:8c:2a:8a:
e4:a7:bb:76:04:72:68:33:8f:7d:08:9f:61:82:bd:
86:1e:61:a5:3b:3a:10:bc:cc:ea:86:3c:77:f3:c2:
d8:db:70:14:c0:c4:86:d9:e6:12:05:ef:6e:d8:b4:
ca:fa:78:3b:42:49:1e:f1:32:ac:37:d1:14:96:d2:
0e:01:97:72:3c:dc:37:43:b0:de:bd:bb:f3:9f:63:
f1:79:62:3c:ff:24:b1:83:04:ec:3c:86:20:46:6d:
2d:c0:3d:10:f3:49:5b:69:fa:a7:9b:f3:d4:11:44:
d5:58:a3:70:22:2b:27:2c:ca:60:65:a3:47:b7:61:
41:19:08:de:d2:57:7a:00:4c:e1:9a:a6:96:43:7d:
e5:54:b0:42:ec:60:96:05:e1:db:8f:fd:67:81:0f:
5c:c2:4b:b2:12:76:16:54:a9:76:6e:18:e3:ec:4d:
d0:17:8d:3f:6c:04:be:ab:69:8d:b1:7f:f1:56:ae:
1f:09:7a:59:0b:a4:46:3d:2b:02:27:d8:1f:9d:7c:
5d:79:03:ac:ea:a0:3f:27:dc:bf:2c:fa:8c:b4:8a:
17:37:0e:74:60:8b:ad:5a:20:bf:5e:d7:cc:37:e8:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:8E:DF:98:AA:21:57:8B:A0:62:70:A2:9A:BA:23:33:79:D6:C7
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:c6:dd:2c:e7:2b:02:fe:05:6c:c9:98:87:60:55:43:f0:
fc:bc:37:cd:c5:d9:83:e0:7e:21:43:5c:e4:d8:91:42:17:36:
ea:bf:09:1d:e2:20:6b:b0:30:27:9f:94:cd:2b:2d:58:fc:16:
7d:ec:3f:79:f5:50:51:c6:15:99:52:6e:fc:22:3d:fb:cd:d5:
ff:93:34:ae:9e:82:ba:a7:56:f3:35:94:71:cb:56:20:a4:ec:
fe:f3:dd:37:00:d2:0a:f3:bd:6e:f0:76:df:b7:a3:23:bc:3b:
ef:0c:2b:47:22:f7:d8:65:0e:01:81:11:89:a7:9e:3b:30:c0:
e1:dc:5b:7b:89:67:2d:70:2c:91:50:20:ad:30:f4:69:42:71:
12:18:a2:01:9a:93:fa:27:60:3a:41:96:77:40:c0:c9:1c:cf:
d4:b7:7b:8d:cc:76:9f:e0:9d:29:d5:da:a6:da:1d:33:75:71:
ed:1e:ae:85:99:96:94:3c:80:bc:74:f2:1a:d4:15:a3:13:cb:
25:03:2b:5b:89:7d:c7:fe:33:e2:ea:29:46:bd:35:40:c5:6b:
e3:97:dc:45:6e:43:9e:fc:f3:1c:ce:75:fa:ed:29:b7:ad:45:
fd:1e:7e:94:c6:28:46:5f:60:a1:b4:b0:ac:e2:88:e0:af:f1:
3c:32:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:51:36 2025 by rpki-client