Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: LLC5IDr8mTVQnCuoopTg29ZeDKmGcuwd7foeWGq6l70=
Subject key identifier: DD:8D:C2:EA:E9:75:EB:39:08:AE:3F:A0:2D:7E:02:A7:BB:D9:61:73
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019882B0F3D80C5498552925FC1BFF78F66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0A71
Signing time: Thu 07 Aug 2025 04:01:31 +0000
Manifest this update: Thu 07 Aug 2025 04:01:31 +0000
Manifest next update: Fri 08 Aug 2025 04:01:31 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: C7WaLNzVNGlBC0jScvEs2qQLHJqmbabrH2OHz8Zci7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:f3:d8:0c:54:98:55:29:25:fc:1b:ff:78:f6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Aug 7 04:01:31 2025 GMT
Not After : Aug 8 04:01:31 2025 GMT
Subject: CN=dd8dc2eae975eb3908ae3fa02d7e02a7bbd96173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:b7:17:43:15:76:38:08:38:64:b3:35:66:
39:61:f3:d5:39:37:8b:27:7a:66:8c:7f:ce:5d:82:
03:df:b6:98:41:aa:2d:5d:d1:64:86:65:12:cd:3f:
8e:e3:a6:99:75:88:20:c4:36:b2:54:98:18:1d:54:
8d:1a:a2:83:a5:c9:82:ff:62:1a:08:c5:c2:ae:a1:
53:7a:b7:a0:2e:c9:db:fc:f5:e1:a1:8a:eb:59:6d:
5d:4c:34:a8:61:cc:ab:13:59:71:27:11:1c:70:9b:
a9:a3:5f:d4:59:0b:04:e3:ca:2d:af:34:af:eb:cf:
d8:1a:be:95:fd:0e:65:cc:6a:dc:72:f5:b4:b1:35:
42:10:d4:09:c5:74:5f:3b:a9:f4:b9:0b:d7:dd:c2:
11:8e:ed:64:7d:62:7c:28:8e:ca:cd:1e:c0:1f:45:
89:89:0b:e4:d8:0c:09:54:7d:36:76:2b:15:8d:32:
f6:9e:15:71:23:8e:73:07:23:69:33:92:70:54:30:
79:77:2a:e9:67:e2:75:cc:65:99:48:a7:6b:0f:15:
c4:04:e4:df:d1:d8:fb:b3:25:c3:a8:b3:79:a6:25:
63:5e:1f:c9:72:61:64:3c:a7:03:20:2b:ed:92:74:
c6:d8:3f:27:c0:c0:b4:06:4e:81:0a:93:e3:be:59:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:C2:EA:E9:75:EB:39:08:AE:3F:A0:2D:7E:02:A7:BB:D9:61:73
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:c4:d4:23:97:e2:2b:d8:c8:76:83:f4:c7:45:89:ce:07:
db:9b:d9:8b:99:18:54:2b:90:3f:b1:c2:91:1f:8c:e4:6f:83:
81:6c:55:7e:fa:f6:f2:ed:fc:c7:08:32:6e:21:40:cb:41:f5:
ae:e2:c4:40:48:73:1a:90:3a:e9:6f:8b:a0:8c:d7:5b:5f:31:
cf:c6:68:12:f1:c2:0f:78:72:6b:2a:9d:6f:d6:e6:e1:b5:99:
4a:9c:68:db:50:36:41:cf:45:d4:2c:3f:96:22:53:9a:3c:04:
9c:4c:97:41:69:15:a2:53:b6:f9:45:6e:5e:9c:d8:8a:e5:ba:
2e:81:6a:f1:09:ae:9b:2b:18:26:88:c5:29:a9:c3:89:56:17:
2e:cc:3f:a0:87:af:1b:69:8a:b1:2c:ce:ff:17:18:6e:1a:86:
c4:1e:f3:05:b3:dc:b1:a0:39:ab:9a:92:69:17:f9:1c:75:74:
f9:2d:f2:3d:96:5e:33:12:59:1b:cb:73:e7:e5:48:75:37:16:
88:60:49:dc:fc:0d:4f:85:2b:8c:50:86:e4:9b:0e:dd:0e:5f:
e4:08:e0:70:41:f7:fa:d1:be:fe:dc:0b:5e:2d:27:51:bb:61:
ac:23:c3:55:2d:e1:e8:66:fb:2c:9c:d8:35:6c:03:2d:09:33:
6b:4d:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:38:02 2025 by rpki-client