Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: u57VlUmzyyFzhY38gwsR0K2Z1DBNL5iSvm+xlQBja3c=
Subject key identifier: FB:66:AF:E3:82:91:77:7F:81:F7:E1:C1:55:A9:FA:A8:B8:BD:16:7C
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 01977007B8800FDE8C4FCF9215E5CE3FB726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 103D
Signing time: Sat 14 Jun 2025 20:00:43 +0000
Manifest this update: Sat 14 Jun 2025 20:00:43 +0000
Manifest next update: Sun 15 Jun 2025 20:00:43 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: T9WNsqaBM/py/R7rQlL3xo7FaZSgt+7u+ayRpCbcLC8=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:b8:80:0f:de:8c:4f:cf:92:15:e5:ce:3f:b7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Jun 14 20:00:43 2025 GMT
Not After : Jun 15 20:00:43 2025 GMT
Subject: CN=fb66afe38291777f81f7e1c155a9faa8b8bd167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:2c:29:3f:7a:b2:20:01:a0:42:f7:91:e3:
fb:a2:56:dd:1d:52:73:5c:e3:5b:4e:0b:70:e6:3b:
dc:e2:f2:89:66:d8:cd:5f:05:b6:a6:e1:6c:54:b2:
c8:8c:2d:6c:33:4c:74:d3:f7:bf:f1:8e:1f:d1:1a:
66:2d:49:f1:6b:42:91:17:53:fa:c9:67:4e:b9:9b:
63:a0:15:23:b6:f3:66:32:7a:03:26:cc:77:5f:74:
46:94:65:b1:53:e8:b5:19:f7:2b:d0:62:cd:9c:8d:
8d:de:89:07:48:c3:71:7f:ae:a0:a1:39:bd:a1:5f:
8b:bd:29:6f:28:61:1a:15:92:f0:8c:41:f4:fb:71:
1e:d3:b6:55:18:c8:2d:f5:cc:f5:61:1c:16:84:4f:
31:89:56:02:97:c7:f8:8e:76:91:f1:4f:cf:46:c0:
55:3f:d5:6f:ce:31:b6:68:01:8a:6f:1a:0d:dd:c8:
ae:5d:5d:1f:08:33:3c:01:db:0a:03:04:8d:11:27:
e7:08:41:7d:a9:8f:52:15:bc:05:6e:c5:0c:ec:10:
f4:e9:43:89:67:1c:d6:2a:28:c7:6d:7f:a2:ab:57:
3f:c6:b7:18:e3:56:df:7a:03:d0:08:41:31:37:ee:
c4:2e:74:e9:18:0e:c9:4c:91:46:48:8d:24:81:3f:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:AF:E3:82:91:77:7F:81:F7:E1:C1:55:A9:FA:A8:B8:BD:16:7C
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:8b:4c:47:63:7e:49:ec:61:0a:04:68:a4:a1:3d:03:d6:
37:92:b2:f3:66:3a:aa:7c:36:f6:5f:e5:0e:da:52:68:9e:8a:
75:7b:c2:2f:cd:60:fb:1e:0a:aa:44:8e:49:a1:28:19:37:6b:
c8:f6:e1:52:fc:72:6e:ed:54:03:7d:ba:a3:95:9d:22:e0:42:
0a:d6:e9:8c:6c:cc:1c:9f:46:bb:fc:c2:4e:40:6a:9b:7f:3f:
57:aa:c8:ea:43:15:bb:d7:ff:1a:83:73:93:9f:d4:f9:51:02:
94:88:20:46:c9:58:9e:60:98:e8:6e:91:d2:58:40:a9:d0:0b:
f2:64:b4:84:a3:ed:e1:36:53:c8:dc:6e:c0:91:e9:15:d1:e9:
3e:07:f3:07:c3:15:8c:c8:21:e5:92:52:3b:c7:6e:7e:e2:7b:
40:b8:cd:b0:6f:26:6e:a9:24:a8:50:b6:ff:e9:f7:e4:7b:59:
cb:6c:1c:69:f2:44:04:31:b6:b4:ed:7c:46:df:13:b1:13:cb:
96:b2:71:1c:a9:cd:60:4f:89:a9:ae:96:e1:73:02:ec:75:8c:
c9:2b:54:02:57:c4:34:95:32:f8:71:ab:84:53:ca:78:84:d9:
23:a9:7d:93:de:26:cf:75:5a:a1:66:1e:cf:77:de:60:30:82:
cf:ff:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:32:08 2025 by rpki-client