Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: +V/CCF9+tqTF9C6Z20+n6C86nie/57poFkazi2m2J+g=
Subject key identifier: 02:4E:24:80:78:09:31:49:F5:36:30:90:CA:46:21:B9:10:00:76:9E
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019873E376B72519CCA6828517F925F9D890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: jDFsfdOZjJ6UFWke6eIAPoOdg+wqe2oWgPHiXqu2s6w=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:76:b7:25:19:cc:a6:82:85:17:f9:25:f9:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=024e248078093149f5363090ca4621b91000769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:88:a5:2f:4c:7f:39:31:6a:75:c6:39:e1:
be:2e:dd:11:c4:64:c4:6f:95:93:8a:05:27:20:b9:
6d:fe:38:50:0e:da:f7:1e:fe:90:93:50:ab:8b:76:
71:c7:11:82:72:b2:df:dd:0f:5c:58:57:ba:25:a1:
d7:65:97:b0:7a:0f:0b:c6:e2:14:b1:53:a3:93:03:
a7:6f:80:7b:c3:ad:dc:f0:24:8e:ed:69:be:ce:b5:
2b:6e:07:be:3d:c1:8d:f2:7d:0f:41:7f:5f:0b:a1:
23:15:45:ac:07:96:fb:e0:e4:de:4f:85:c0:76:54:
dd:fa:88:85:4c:0d:5f:de:da:ac:e2:1a:45:61:ec:
52:d8:7f:50:28:4d:c4:1f:15:4b:25:08:06:9e:1e:
0e:1a:0d:2d:02:d3:df:ff:cb:41:2d:49:75:16:c2:
5f:0e:67:20:a4:44:7c:af:ab:f4:37:8a:96:96:ff:
36:b2:47:2f:c4:5f:f4:f2:0a:ae:cd:77:83:99:e5:
23:74:bd:3a:5d:83:be:a0:b5:9a:bf:fb:fd:5d:1d:
2c:01:ec:cf:60:df:7e:15:d9:d7:d6:9b:60:f5:11:
c0:be:61:5c:c9:6d:6e:35:5e:3d:42:b5:66:a3:ac:
3d:1e:0e:d2:b8:4e:dc:83:8a:0e:8a:ac:70:b3:f5:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:24:80:78:09:31:49:F5:36:30:90:CA:46:21:B9:10:00:76:9E
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:79:73:e4:79:b4:c4:e4:34:e8:84:44:65:f8:2e:7d:7d:
eb:18:20:b6:08:8a:4a:ab:f7:34:08:77:aa:cd:88:c7:84:e3:
41:ab:fa:01:be:b0:0f:df:2d:5a:56:5b:95:3b:4b:70:04:a4:
bb:02:fb:7f:d3:8a:45:2c:8d:1a:26:8c:6a:fd:a7:07:c7:89:
25:c3:33:2d:3a:e4:3e:c4:6f:4b:0d:5a:28:7d:b6:f3:49:10:
db:0c:06:0e:80:2a:30:e6:1f:6e:44:10:e7:d9:dc:88:a6:61:
4d:e9:35:e5:ac:33:a8:ef:2f:a3:8d:8b:eb:8c:2a:7d:8b:26:
f1:01:7f:b5:2e:78:a7:96:c4:38:d4:99:a0:de:95:ac:ce:20:
68:e8:94:c6:ac:c9:ac:7e:e2:e2:77:32:b0:5d:9a:03:65:6d:
12:76:db:ea:c6:30:b5:04:d5:77:fa:1b:35:f5:1e:2d:fb:cd:
16:ba:af:20:94:10:8e:b0:65:7e:b2:66:47:17:d1:76:55:09:
ee:09:f7:52:fb:d9:28:c0:7c:4d:fd:59:79:78:4e:87:e0:29:
e2:b9:a7:7e:b5:33:9c:e1:f4:13:57:2f:95:d5:6b:04:ec:01:
88:56:67:c2:be:e3:52:62:b9:0b:39:12:44:ba:cd:ba:96:12:
2d:3f:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:24 2025 by rpki-client