
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: P1mpmoytZdSDmtOZHthoWe4fPAxILijq6BspQtEHV0U=
Subject key identifier: AB:BF:37:DC:EA:49:6F:5A:10:64:6D:66:50:20:B4:1A:DC:8D:8D:C1
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019872CFE20B44B5B6D6985EC7C16B757D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 08F3
Signing time: Mon 04 Aug 2025 02:01:23 +0000
Manifest this update: Mon 04 Aug 2025 02:01:23 +0000
Manifest next update: Tue 05 Aug 2025 02:01:23 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: o9fq4AFAQe+CpPP5ZWSpn49Vt/+sHo+/VpFQKHqGKaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e2:0b:44:b5:b6:d6:98:5e:c7:c1:6b:75:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Aug 4 02:01:23 2025 GMT
Not After : Aug 5 02:01:23 2025 GMT
Subject: CN=abbf37dcea496f5a10646d665020b41adc8d8dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:95:ec:e0:43:7f:dd:fb:db:c7:94:26:b1:
65:a6:04:5e:0a:f0:1e:b3:d2:e9:d2:33:23:1e:d5:
c0:22:15:4a:9f:e8:fa:d1:06:a3:c5:00:d1:af:2b:
fd:bf:73:b6:22:3a:76:d3:89:2c:f3:06:20:7f:5b:
9b:c1:d1:bf:d7:fb:ed:92:ec:60:03:33:97:c2:b1:
a5:17:d8:51:a5:54:c6:74:f6:e0:4a:49:41:07:df:
3b:a3:ff:59:1a:80:76:fe:1a:67:f3:07:1e:b1:4b:
43:fd:28:16:a3:62:ff:e2:4c:af:5b:a4:28:f5:1d:
67:bb:be:60:cf:7f:da:ce:c6:c8:ae:e3:b2:80:eb:
91:41:55:94:bc:ff:b5:09:bf:6c:02:59:18:91:bd:
86:c6:57:4b:d2:11:02:f9:e8:c6:b4:6c:c7:54:51:
3a:56:2a:af:df:e7:01:ca:bc:a8:fa:3c:a2:82:7f:
9b:ee:d5:3a:98:1f:75:b9:06:05:b6:bc:a3:73:7e:
95:34:b1:d7:79:97:df:3d:99:56:76:38:61:c3:77:
dc:2e:6c:41:67:bd:72:96:4f:d7:b2:d1:38:76:10:
3c:4e:62:4e:8c:6d:69:02:9b:61:b5:79:ec:f9:75:
98:cd:b0:ad:50:13:bf:fa:88:d0:25:3c:6b:b6:46:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:37:DC:EA:49:6F:5A:10:64:6D:66:50:20:B4:1A:DC:8D:8D:C1
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:9e:30:9c:4b:a9:66:cd:d1:c9:92:f6:12:d4:b0:cc:a8:
ab:11:fd:1e:da:db:e3:d9:37:87:b6:b0:61:02:ea:d9:af:c7:
f5:91:23:19:6a:80:6b:83:34:51:96:93:52:1c:64:7b:dd:fc:
74:3d:24:cc:8a:f6:54:5d:ea:36:b2:e4:35:13:02:08:cf:ce:
c0:14:ff:0a:2c:40:82:ec:f0:ef:5e:0d:60:c0:6d:cf:f0:d6:
9e:32:19:bd:39:3b:30:12:8e:c3:0a:54:dc:a3:5c:fb:0e:16:
64:bc:b0:c3:cc:4b:64:d9:34:76:76:8d:14:57:fb:4e:97:22:
33:07:df:52:24:5a:e2:37:c8:7b:2f:93:a8:3b:5f:a0:40:4c:
ee:95:85:fd:02:9d:36:ce:15:5d:26:e0:f1:d3:34:ce:78:5d:
69:7b:4d:d9:49:5c:75:4f:01:14:82:33:92:33:4e:53:fe:4c:
3c:1f:df:2d:4b:f9:fd:27:4c:0b:cf:b4:21:d4:46:d2:8a:09:
80:52:79:58:ca:cb:93:9a:c8:40:d7:1c:8f:2d:91:7c:b4:f4:
4e:25:79:0d:9b:ec:2c:4a:a7:81:f5:83:5a:2d:d5:c5:6d:1c:
ee:61:e1:c0:06:0a:11:51:8b:48:19:46:15:8d:2e:fe:a5:5b:
e2:ec:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:01 2025 by rpki-client