
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: C7fIXD0UabGOBuUB4LqckhOBXSw5Exvb0oZ6DIg7Ang=
Subject key identifier: 7B:07:01:BF:E0:55:4E:1A:4F:F6:74:69:8E:AF:00:9F:E0:17:6F:B0
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 01987E65CAC57E1E7C308E67DD437C8924F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 08:00:56 +0000
Manifest this update: Wed 06 Aug 2025 08:00:56 +0000
Manifest next update: Thu 07 Aug 2025 08:00:56 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: qEZyN/lJT4kzEkB4JSJT1EjZTXM2ZAYhMqNoYQ9kL0U=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:ca:c5:7e:1e:7c:30:8e:67:dd:43:7c:89:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Aug 6 08:00:56 2025 GMT
Not After : Aug 7 08:00:56 2025 GMT
Subject: CN=7b0701bfe0554e1a4ff674698eaf009fe0176fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:87:75:3d:50:97:a7:b5:b8:20:67:f0:da:
97:c9:47:d2:c7:4f:b6:03:3f:a1:16:b0:e4:45:e4:
4b:04:d3:47:d7:0a:3e:32:c0:da:78:a7:87:f5:18:
11:29:2a:4d:05:5f:19:d1:a6:5a:9a:9c:f9:31:54:
4c:9b:8e:41:1c:a8:04:bb:90:ca:ed:58:d6:70:72:
05:b7:08:a1:59:2c:de:c7:4f:1a:26:a6:b0:ba:13:
26:db:06:34:c1:b3:c6:c2:a4:32:a1:8e:32:5b:03:
4c:67:4e:62:10:00:f7:45:05:c4:8c:a0:45:8b:bf:
78:70:33:56:1f:0a:e4:6b:49:d7:a8:56:9b:ab:52:
85:b6:bc:ea:4f:15:9c:7d:08:53:ab:a2:3b:fe:b1:
c8:9f:ad:12:5a:23:9d:ff:3b:18:8b:a3:01:59:01:
b4:3a:13:7f:3e:67:14:d2:2a:27:8c:d9:ed:f3:13:
04:59:76:39:d6:84:0a:2b:be:39:97:63:1f:34:6e:
82:25:0c:aa:13:f5:26:18:28:ac:25:d7:4b:d2:da:
f0:93:89:8b:7f:a7:40:34:53:fc:83:8c:a0:77:f9:
3c:e1:c5:b6:f3:94:cb:18:46:2a:d8:f5:c2:fc:f1:
73:d2:84:a5:79:6d:b0:97:66:e0:59:5c:39:ff:80:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:07:01:BF:E0:55:4E:1A:4F:F6:74:69:8E:AF:00:9F:E0:17:6F:B0
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:f0:8d:2c:43:b3:b3:70:57:01:2b:74:cf:51:38:fe:3c:
09:97:e2:ca:29:12:f1:a2:98:a0:0c:9c:12:07:77:d2:69:84:
67:b6:a8:44:f4:09:d5:ae:b4:4d:d4:60:71:ac:cf:86:f3:da:
2e:e3:d0:27:cb:b9:01:7d:1f:22:50:e6:f5:bb:30:b8:2e:66:
dd:64:e3:43:a7:20:d9:a7:77:ec:de:cd:6c:95:59:b3:ca:c9:
a1:a9:c9:3d:49:60:6e:97:a3:93:40:60:63:56:b3:a3:93:4a:
52:5c:d5:fa:d2:f4:e3:3e:17:e8:d8:99:00:14:6a:09:df:63:
53:dc:d0:42:35:0c:95:83:30:8b:f4:3c:bb:bd:71:23:6e:fe:
e4:2d:d8:7b:63:18:dc:40:a3:88:26:f4:da:50:3e:48:1c:14:
0f:18:78:0f:c4:af:2a:7b:68:33:16:99:e1:7f:79:ca:e0:4a:
d7:4d:ec:03:83:8c:42:0b:ef:43:de:d2:42:c8:ea:bb:0e:6b:
a3:40:37:93:64:ce:e6:03:5b:5f:0d:84:60:18:b0:34:21:fe:
dd:3c:dc:2f:65:dc:e2:85:74:dc:15:b8:e8:5e:1d:a9:ce:37:
67:1e:6a:71:04:4f:76:27:5f:86:e6:87:90:71:21:46:76:47:
d3:cf:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:19 2025 by rpki-client