Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: o+7PjGtfm5A0WQQ7r/+jJgg/HgmRS7ZBqkZuLBSQPpg=
Subject key identifier: B0:5C:96:35:28:DC:65:CD:DD:35:3A:1A:C4:30:E1:09:76:B3:57:EE
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0198752BC817D3DA2DEFDA3A8A7BD26855CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0DF1
Signing time: Mon 04 Aug 2025 13:01:00 +0000
Manifest this update: Mon 04 Aug 2025 13:01:00 +0000
Manifest next update: Tue 05 Aug 2025 13:01:00 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: kqmI9Xh2dO9aXsn9JwfH9CzfG+qtforZQq/ulKGzh4Q=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:c8:17:d3:da:2d:ef:da:3a:8a:7b:d2:68:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Aug 4 13:01:00 2025 GMT
Not After : Aug 5 13:01:00 2025 GMT
Subject: CN=b05c963528dc65cddd353a1ac430e10976b357ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:67:7e:6c:db:4d:61:cf:9b:d9:47:a7:ba:
a3:2d:ad:de:ef:61:f1:43:22:dc:d6:40:cd:11:b2:
d7:dc:7c:f8:16:97:c7:6e:6e:d5:95:97:71:ca:71:
d2:3b:1e:b3:b3:be:92:e9:5e:60:f1:72:fd:fb:47:
49:ef:b3:83:e0:93:c2:d1:f0:91:a2:41:1b:8f:1e:
ac:1d:d5:3a:5e:6f:7a:fd:2f:4e:fd:7c:0b:d5:fe:
ef:d5:6f:cf:ca:de:ab:0d:c0:74:c3:a5:9a:12:6d:
7c:8e:77:20:67:6b:b6:cf:43:be:05:b0:e3:66:f9:
9e:90:d6:c5:6e:ec:fa:b1:59:dd:a7:b9:d5:6b:ba:
20:6f:36:bd:31:b5:db:ab:7d:83:65:5d:c6:31:eb:
b3:ed:56:79:ec:67:fe:bb:84:47:1c:45:cf:ff:da:
26:5a:c4:74:f9:ed:55:78:d0:04:2a:ae:87:e4:b7:
03:aa:26:61:82:e4:65:74:04:82:ec:85:80:d0:51:
e6:3a:45:31:8d:f7:a2:81:16:01:5a:ee:31:02:73:
db:29:06:73:d0:11:ce:4c:be:ac:68:cb:cb:bf:72:
39:9c:87:a8:06:81:13:79:4f:5a:f1:c3:66:bd:d0:
97:a9:4f:04:cf:c6:74:38:c4:ab:bd:41:0f:8a:f4:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:96:35:28:DC:65:CD:DD:35:3A:1A:C4:30:E1:09:76:B3:57:EE
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cf:14:47:2f:52:b6:71:7f:39:5e:06:fd:6f:3f:8a:8d:54:
b9:5c:8a:29:93:56:fb:c4:33:69:05:64:cd:03:a1:4b:6a:ea:
25:35:97:67:08:cc:30:5b:6f:2b:c6:6e:c5:d2:d9:1e:1a:88:
43:5e:bb:79:73:0f:0d:8a:83:c1:6e:1f:7c:e8:e6:ac:7c:39:
dd:a2:69:51:48:9a:a9:a2:be:b8:6b:74:5a:c9:38:8a:54:f6:
13:1c:ca:fe:cc:ac:c6:37:aa:b1:2e:e6:bf:de:6d:79:7f:9e:
43:70:ae:5c:7e:33:84:83:4f:16:a6:0d:d1:d0:70:4a:ff:56:
60:b8:04:47:22:3b:1b:56:87:4b:e1:7d:e0:1f:fe:10:55:81:
15:69:e5:cf:49:81:d0:1f:e2:4e:a1:10:75:fb:92:84:4f:67:
20:c2:f7:79:d6:6d:89:3e:61:30:73:a7:2f:b4:cb:97:88:83:
2b:83:04:4b:7a:00:2f:bc:92:e8:c7:d2:40:36:92:09:72:c0:
46:e0:b5:97:5c:a5:39:64:54:d2:c2:f0:da:7e:f4:55:b8:e7:
c3:64:fa:60:3f:82:e1:34:12:da:1a:2c:5e:ab:7b:a4:f8:3b:
a1:92:a4:b7:41:a1:2b:75:30:cb:fc:95:38:68:db:97:b3:e0:
e2:7a:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:15 2025 by rpki-client