Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: oP3+eba50sTzkuAcQb+zQL+ikRWf2W51PFukhVk0pIs=
Subject key identifier: 70:FB:C0:79:0F:6C:11:D4:3B:91:E2:5B:7D:D0:F1:E2:44:26:30:49
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019873068E7438FE8638BF7B36AB5B0E589A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0B26
Signing time: Mon 04 Aug 2025 03:01:06 +0000
Manifest this update: Mon 04 Aug 2025 03:01:06 +0000
Manifest next update: Tue 05 Aug 2025 03:01:06 +0000
Files and hashes: 1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: UCL9Chc0RBm1W5UTjszr/7AeHkx/5t8y7zvRR4wSq58=)
2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8e:74:38:fe:86:38:bf:7b:36:ab:5b:0e:58:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Aug 4 03:01:06 2025 GMT
Not After : Aug 5 03:01:06 2025 GMT
Subject: CN=70fbc0790f6c11d43b91e25b7dd0f1e244263049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:d5:d9:55:b2:b7:1d:d0:69:7f:e1:d6:50:
89:f0:1c:bb:64:92:17:40:d7:35:68:f8:93:b8:4a:
b3:b2:a0:fc:b2:05:13:a6:15:e7:dc:b3:a3:99:dc:
1c:e0:f3:71:d4:6f:fc:a7:34:c4:3a:78:72:fc:25:
c5:44:8d:31:3b:3d:76:2a:ac:0a:cd:9a:ca:cc:72:
1a:b8:1a:9e:78:93:d3:52:0b:57:d7:c7:bc:1c:d2:
01:1a:3d:5d:29:8d:4c:d1:e6:84:2c:5b:4b:35:b9:
57:eb:1a:3b:6c:f3:05:55:de:3b:aa:62:18:7a:fa:
d4:a8:9f:ea:40:eb:d0:b2:28:84:6f:9a:e2:21:02:
2d:66:9e:c1:b2:2e:5d:99:c5:06:50:0d:fc:66:59:
14:d2:b2:2a:fb:74:06:8c:9b:25:9a:5a:ec:74:26:
2e:ae:48:c3:33:36:02:72:8f:63:14:7d:68:c4:1d:
1c:3b:ed:e3:17:66:80:b6:3f:15:bb:3c:f7:44:73:
d7:2e:75:15:06:af:5d:a0:fe:f6:05:0b:c4:08:26:
8f:74:ae:d2:38:c4:73:58:cf:5c:ca:c4:4e:6f:39:
66:be:8c:6a:e9:ab:96:f3:3b:31:4c:95:c1:77:72:
7c:5f:4e:24:d7:82:82:4c:fc:9b:72:bb:5f:a1:f4:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:C0:79:0F:6C:11:D4:3B:91:E2:5B:7D:D0:F1:E2:44:26:30:49
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:db:0a:2b:e9:87:87:8a:14:88:3d:64:be:6a:b3:b3:95:3f:
f9:14:b5:7d:6e:56:cb:e4:ce:70:8f:7a:d1:a8:1e:12:85:64:
17:17:62:3a:20:ff:0e:21:4a:51:8d:1f:35:6b:4c:d1:85:79:
d2:b7:2c:94:d7:69:79:f9:43:7a:7e:62:7d:2d:b7:c3:27:db:
c2:5e:17:b9:f0:d7:0d:97:2b:6e:bc:dc:d4:0f:43:a0:99:3a:
f1:3c:3d:3c:84:3f:1f:f5:44:ce:1d:0b:13:80:fa:87:42:63:
a4:fb:fb:25:76:94:2a:74:63:af:e9:20:cc:5b:8a:17:6c:d2:
c1:d9:4f:20:f7:3f:f9:3b:64:07:1a:c3:e7:7e:c0:62:eb:cc:
05:b9:3f:89:81:49:63:a9:f9:38:44:ab:8b:41:e8:35:3e:35:
7b:f1:27:56:97:e8:3b:24:49:61:7b:61:16:02:92:1e:13:78:
97:3f:62:5a:a4:04:5d:47:31:3a:9a:b9:08:cf:31:af:06:f7:
48:bf:1f:c3:8d:cc:dc:a3:e6:93:58:04:a8:5b:81:a9:29:c0:
77:d8:00:cd:52:e9:62:8d:93:2a:7f:fb:77:9e:bb:e6:53:fc:
80:e0:0b:78:ba:87:a7:eb:64:10:de:22:5a:44:8f:8a:11:9b:
8e:f8:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:04 2025 by rpki-client