Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: yBAXr92K6bVjcwZIZq0+e5SKuW/Q7U8YSIDnQSD3iNw=
Subject key identifier: DC:1E:3B:E8:51:53:7B:16:46:15:B6:B2:92:AE:99:19:CD:4B:CF:CF
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 01976C987E4529F177F44702DFE052DCFBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0D68
Signing time: Sat 14 Jun 2025 04:00:22 +0000
Manifest this update: Sat 14 Jun 2025 04:00:22 +0000
Manifest next update: Sun 15 Jun 2025 04:00:22 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: /0C35OcqI9JA/vZwsZLwxxZt++6N2f9gO48SzqrOYpg=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:7e:45:29:f1:77:f4:47:02:df:e0:52:dc:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jun 14 04:00:22 2025 GMT
Not After : Jun 15 04:00:22 2025 GMT
Subject: CN=dc1e3be851537b164615b6b292ae9919cd4bcfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:c8:46:b3:89:58:44:47:ee:5b:fd:bf:20:
14:19:ca:a4:96:92:75:07:26:53:a5:08:ed:09:90:
d5:6d:83:3d:87:8f:1b:ad:59:08:22:19:ef:1b:d1:
73:1a:64:9c:46:36:ed:64:18:19:35:c4:de:92:17:
33:9e:25:99:b9:82:57:59:dd:1d:0d:3b:48:c2:00:
5f:f5:3c:8d:f5:d1:2a:b8:5e:da:af:81:bc:5f:60:
53:d1:10:96:31:6c:b5:3e:89:c6:d2:b7:15:d5:23:
9d:7e:07:84:ed:83:bb:8e:d8:6a:87:28:61:0b:9a:
bf:35:6a:0b:e8:f6:7c:75:f9:3a:84:95:69:67:e3:
18:3c:ec:ba:fe:92:6a:34:7e:37:ed:24:fe:32:85:
ac:fa:ca:1d:ae:7d:3d:cc:e5:70:80:f4:2e:63:63:
15:3a:0c:ad:60:90:ff:0c:d0:ef:1e:d4:7a:6d:5d:
10:50:ba:57:72:f2:dc:ce:7d:fc:dd:81:5f:ba:7d:
dc:4a:aa:01:1d:ed:96:97:38:5b:65:a9:ea:04:02:
f1:1c:78:e3:4f:72:2c:1f:3d:2d:72:69:0b:cc:7c:
5b:db:a8:fd:d5:1c:71:f1:dc:b0:e7:e2:a2:45:52:
4a:c9:cc:b5:51:44:eb:23:2c:3a:23:3b:92:cd:49:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1E:3B:E8:51:53:7B:16:46:15:B6:B2:92:AE:99:19:CD:4B:CF:CF
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:a4:9a:8a:a0:47:7f:ce:ca:24:e8:fe:5b:68:8d:70:a5:
92:d0:52:36:97:10:e9:e6:be:1b:6e:09:cb:86:1f:12:ac:48:
68:d7:0c:6f:e6:6d:fd:c6:d9:b6:87:9b:61:03:67:c3:e9:3a:
e7:50:f1:72:95:9d:bf:3a:3a:da:40:fc:25:e7:dc:61:d5:ad:
d0:04:cd:58:58:7e:82:c6:f6:5f:51:b4:d4:6c:f3:d5:ea:85:
79:7a:f6:fb:2b:10:0f:5c:f4:fa:4b:07:f9:80:c4:11:fe:65:
e3:f4:ba:ea:ac:09:b1:9b:f5:61:bf:25:b4:6c:c7:ee:b0:9a:
cc:49:d7:23:14:1f:4a:5d:ab:ac:be:6e:77:60:d9:f3:7a:2e:
ec:c9:be:04:e7:d1:52:b7:78:b0:7e:a2:33:ec:40:61:0d:83:
a1:5b:cb:f3:5c:a1:56:16:6d:ea:49:19:13:28:9f:5f:f6:cc:
ee:2f:ee:e0:6d:77:71:66:03:0d:f3:ae:a6:59:6a:f3:78:e1:
d5:9b:b7:88:b0:c6:e0:5d:4b:ea:2c:bc:e4:02:74:63:79:24:
db:81:8d:ec:2a:1e:10:dc:dc:fa:72:67:2b:e3:1f:e8:49:9c:
a1:9e:56:f4:c1:73:97:0b:65:9f:a6:07:8e:de:11:16:9e:62:
0f:59:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:43 2025 by rpki-client