Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: /KyDGojzqAQFG6mGnF5BX4ASx99OmSMIpev7FEz79u0=
Subject key identifier: F2:D8:21:7D:70:8C:AE:D1:25:25:7C:91:07:5F:23:B8:A5:67:1A:C6
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0198752BFF8FD91B8CC688665748E62F706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0631
Signing time: Mon 04 Aug 2025 13:01:14 +0000
Manifest this update: Mon 04 Aug 2025 13:01:14 +0000
Manifest next update: Tue 05 Aug 2025 13:01:14 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: CAEKGZmiynhkq9tCfBvsNeeJk+qaQVcjiqPw9Jp6N+w=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:ff:8f:d9:1b:8c:c6:88:66:57:48:e6:2f:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Aug 4 13:01:14 2025 GMT
Not After : Aug 5 13:01:14 2025 GMT
Subject: CN=f2d8217d708caed125257c91075f23b8a5671ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:c1:ff:e4:6c:e7:7a:ac:59:b2:14:cf:dc:
a7:fb:0c:8c:d8:24:fd:95:66:e4:70:e9:66:28:ac:
9b:d9:09:24:82:a4:99:b4:1c:8c:47:2e:52:66:2a:
66:ec:83:57:1a:17:82:a5:d4:2b:1d:65:cc:30:43:
92:7d:96:13:2c:ca:fa:12:24:7c:0d:61:2e:c0:d7:
50:ce:77:5f:ca:17:c3:26:f6:ea:ab:e3:bf:08:ad:
f0:7d:2c:a8:cd:14:10:c9:97:cd:fa:10:6d:b1:e7:
b0:e9:c2:b2:04:3e:ae:e8:aa:cb:07:bb:1e:b2:3c:
29:d0:ed:5d:88:ec:d5:73:69:84:c6:38:69:83:4d:
1e:9f:ad:2e:08:bf:5e:e4:0c:f6:97:41:89:1f:b0:
f0:b8:80:d4:fb:e2:70:55:91:6a:e8:4d:e0:9e:96:
ae:91:2c:64:44:af:2c:36:30:bd:0e:cf:c1:21:51:
98:85:51:39:4c:d7:d7:1a:bf:51:15:ab:26:14:28:
78:f6:6a:b1:7f:8b:df:06:3b:27:c2:17:66:32:87:
8e:6e:ab:f7:22:bc:b4:4d:1a:e6:a8:79:5b:3f:35:
3b:9e:42:bc:4f:0d:c9:8e:8a:4a:2e:c7:37:f5:49:
37:e4:cb:40:71:37:f4:cb:33:f6:21:70:6b:3c:0a:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:21:7D:70:8C:AE:D1:25:25:7C:91:07:5F:23:B8:A5:67:1A:C6
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:93:87:fe:87:ca:b7:dd:c6:44:a2:a5:79:fa:ce:02:d0:8c:
21:14:02:17:7b:55:47:9f:5e:8d:e5:da:96:69:e7:da:17:c7:
2c:6c:3e:6b:8d:30:90:10:56:bd:79:6b:f5:7e:8c:85:0b:d4:
c9:ca:2f:5c:40:cb:3a:cb:a9:6a:14:f0:15:39:59:a4:b6:f3:
98:b0:70:60:69:2d:37:5f:de:17:97:11:8b:68:f5:77:fb:a3:
c8:1c:a7:f3:0b:73:00:d6:90:32:33:94:2f:e3:7f:55:76:07:
84:ca:1a:02:6f:1d:b8:f6:1e:80:cc:3e:d7:be:56:01:37:68:
63:16:d6:93:74:b2:37:44:75:1e:1b:73:f0:24:58:09:91:6f:
16:75:eb:41:13:31:6e:58:ec:8e:37:25:28:de:1c:71:9e:18:
83:e3:8d:4f:4b:6c:99:b1:ae:c0:24:f1:19:5d:e9:3c:0b:40:
8c:0d:64:71:4a:51:e2:32:7d:35:65:23:be:6c:84:e8:97:70:
94:49:33:73:fc:54:f5:07:20:c8:98:8f:bb:31:0d:7e:58:5e:
5f:e4:c5:5d:99:c5:9f:0c:14:d4:c6:6a:53:9c:db:df:53:06:
77:10:6e:d7:f1:97:d3:ed:32:f6:cd:22:41:25:3d:6f:66:38:
de:c9:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:13 2025 by rpki-client