Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: gWlzTB4ypX6t7lrc5sKPnAdZgvbCoCWO4uk3AKM60ck=
Subject key identifier: 85:AF:15:18:B3:84:1E:0E:34:46:C9:FA:BB:79:73:E7:EE:57:FA:46
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 019897B767FCD5EB18A2F9FAE51DAFE77B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 045F
Signing time: Mon 11 Aug 2025 06:00:35 +0000
Manifest this update: Mon 11 Aug 2025 06:00:35 +0000
Manifest next update: Tue 12 Aug 2025 06:00:35 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: YdCEhJIuvKtHZQ1gfKydzNj0xf4xfgnd7GPzmygXx5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:67:fc:d5:eb:18:a2:f9:fa:e5:1d:af:e7:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Aug 11 06:00:35 2025 GMT
Not After : Aug 12 06:00:35 2025 GMT
Subject: CN=85af1518b3841e0e3446c9fabb7973e7ee57fa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:25:0b:bb:d5:d7:55:85:74:9a:fa:87:09:
f9:f1:f9:ae:7a:e8:d3:b6:e4:73:7f:38:d2:12:23:
8c:41:37:8e:92:00:45:71:0f:00:ba:39:1a:de:1f:
ad:67:0b:1b:be:7e:e4:4f:8c:c1:2b:f7:f7:14:7f:
74:94:9d:22:4d:bc:17:38:7a:13:f6:02:74:ae:51:
36:2d:21:f2:86:f8:bb:40:b0:ce:7e:cc:b5:43:4b:
5a:d6:e8:86:aa:cc:6d:24:01:24:25:c2:1f:06:fd:
d8:75:65:da:10:21:a3:e9:42:85:b8:b7:58:c9:15:
c9:8c:46:05:06:8c:5a:1b:c9:0f:a2:7e:b3:71:b4:
ed:8b:8c:fa:8c:bf:f6:f7:8f:87:46:ab:9f:30:68:
bb:d0:26:9b:1b:0b:fb:90:8f:75:64:16:00:fd:b9:
1a:51:e7:43:8e:4b:2d:28:4d:fe:3e:32:fe:ed:91:
d9:e5:f3:65:3d:75:9c:c5:87:38:b1:e6:da:38:5f:
91:62:3f:dd:5f:7b:86:57:e9:1e:a3:16:f7:fb:f1:
20:a3:f7:8e:50:91:0b:21:0a:8d:b9:f4:6b:ef:fa:
b8:3a:56:28:5d:65:7a:58:31:42:86:cb:de:ca:6a:
c0:09:8c:54:3b:cc:47:50:59:dd:b8:e6:a9:46:0c:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:15:18:B3:84:1E:0E:34:46:C9:FA:BB:79:73:E7:EE:57:FA:46
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bd:e3:ef:e4:02:06:15:a1:33:73:56:ab:47:4d:44:b6:de:
a5:c1:82:84:26:8f:da:a1:1c:18:e8:df:3a:54:97:ae:23:4e:
9a:cd:e8:c5:58:2f:3b:cc:87:69:8a:96:06:d4:1a:26:de:19:
da:64:17:5e:09:1e:a3:d1:38:49:05:15:e8:94:47:79:35:4e:
63:63:67:40:93:1b:23:9a:b3:40:b1:61:2f:2a:cc:4d:81:fe:
99:80:11:58:b6:c8:89:7b:a9:d4:2e:04:28:fe:11:19:4b:9f:
f2:2c:38:39:39:79:6a:0e:72:3b:12:dd:89:41:2e:81:61:52:
a1:b6:15:d1:40:43:84:4f:90:90:b5:fb:f7:3c:27:ca:78:29:
f4:4d:b7:3e:71:a5:7c:6f:1a:f0:b1:8a:ac:fd:0c:82:1b:b9:
21:43:f6:e3:ab:2b:65:94:67:5c:55:0e:48:db:2a:db:71:89:
59:dd:98:1a:34:51:d3:9b:ee:21:1d:a4:4d:ea:73:11:ce:8c:
f8:46:46:64:b8:42:98:d2:52:cb:58:18:26:15:c6:9a:b7:a6:
00:e5:86:41:01:87:6f:31:ac:c2:ef:00:49:2e:59:37:56:07:
23:3d:0e:3c:63:e9:6b:54:56:fb:e2:09:b4:41:7e:0b:f8:78:
0a:b3:7f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt2f81esYovn65R2v53swMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjZlYTgwMjMwN2JjNTNiZmYzY2JiNjNlOWY4MTc5YWM0
YzFlMzkwHhcNMjUwODExMDYwMDM1WhcNMjUwODEyMDYwMDM1WjAzMTEwLwYDVQQD
Eyg4NWFmMTUxOGIzODQxZTBlMzQ0NmM5ZmFiYjc5NzNlN2VlNTdmYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGYlC7vV11WFdJr6hwn58fmueujT
tuRzfzjSEiOMQTeOkgBFcQ8Aujka3h+tZwsbvn7kT4zBK/f3FH90lJ0iTbwXOHoT
9gJ0rlE2LSHyhvi7QLDOfsy1Q0ta1uiGqsxtJAEkJcIfBv3YdWXaECGj6UKFuLdY
yRXJjEYFBoxaG8kPon6zcbTti4z6jL/294+HRqufMGi70CabGwv7kI91ZBYA/bka
UedDjkstKE3+PjL+7ZHZ5fNlPXWcxYc4sebaOF+RYj/dX3uGV+keoxb3+/Ego/eO
UJELIQqNufRr7/q4OlYoXWV6WDFChsveymrACYxUO8xHUFnduOapRgyDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWvFRizhB4ONEbJ+rt5c+fuV/pGMB8GA1UdIwQY
MBaAFF/26oAjB7xTv/PLtj6fgXmsTB45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYt
NTgzODIzODQ3OTUyLzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYtNTgzODIzODQ3OTUy
LzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnb3j7+QC
BhWhM3NWq0dNRLbepcGChCaP2qEcGOjfOlSXriNOms3oxVgvO8yHaYqWBtQaJt4Z
2mQXXgkeo9E4SQUV6JRHeTVOY2NnQJMbI5qzQLFhLyrMTYH+mYARWLbIiXup1C4E
KP4RGUuf8iw4OTl5ag5yOxLdiUEugWFSobYV0UBDhE+QkLX79zwnyngp9E23PnGl
fG8a8LGKrP0Mghu5IUP246srZZRnXFUOSNsq23GJWd2YGjRR05vuIR2kTepzEc6M
+EZGZLhCmNJSy1gYJhXGmremAOWGQQGHbzGswu8ASS5ZN1YHIz0OPGPpa1RW++IJ
tEF+C/h4CrN/lQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:58:31 2025 by rpki-client