Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: 6RpA4IW9+8yWOSs6j3TNL27BEi9wMAGgz8rX4c4lRjo=
Subject key identifier: 06:4D:C4:24:62:52:CB:AF:55:88:20:9A:7F:B8:93:45:8F:1C:4C:D9
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 01987B9CE64216C2741B99C9E0EFA3958180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0690
Signing time: Tue 05 Aug 2025 19:02:16 +0000
Manifest this update: Tue 05 Aug 2025 19:02:16 +0000
Manifest next update: Wed 06 Aug 2025 19:02:16 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: mFqTJ8vMTrGyNKWLIcE9fb4oYfRgOVOMLVXufqqUxsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:e6:42:16:c2:74:1b:99:c9:e0:ef:a3:95:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Aug 5 19:02:16 2025 GMT
Not After : Aug 6 19:02:16 2025 GMT
Subject: CN=064dc4246252cbaf5588209a7fb893458f1c4cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:f9:1a:4a:d5:2c:b5:d3:a9:cb:19:dd:40:
55:54:ff:97:a8:5c:fa:1c:6e:6c:47:46:30:13:2e:
76:5b:8d:0f:e4:b3:56:df:a1:24:cc:f9:0b:91:09:
72:19:45:ae:f7:e3:c1:62:02:55:3f:a1:2a:67:27:
0d:0a:16:5c:e6:58:cc:47:d9:75:a5:27:68:e8:a0:
59:2b:20:fc:93:37:e6:ac:f0:cb:32:21:ec:f8:4c:
8a:a8:60:b4:c5:17:46:c6:0c:47:58:56:1c:e1:af:
6d:ed:6d:39:23:91:85:16:a9:e1:b4:0d:76:d2:4e:
4f:8b:51:a0:4f:22:17:00:73:33:46:57:bd:1d:d1:
0d:49:5f:41:0b:5c:84:7b:6e:0a:a7:1e:a2:48:3d:
a4:77:52:c3:01:99:e8:23:79:e8:a5:26:b6:26:43:
08:ec:33:28:fb:94:7c:5a:42:df:bc:98:f9:87:6f:
bc:c6:0e:78:7e:00:46:91:7f:39:f6:f8:58:fc:f6:
84:1a:cb:d8:de:1d:f5:33:34:9f:f6:a4:1f:27:d1:
f0:e9:59:66:98:6e:3d:b3:56:c7:dc:fc:a8:c8:cb:
67:5f:bc:ec:8b:97:d8:3d:4e:76:44:d5:96:be:56:
aa:54:cb:57:0d:5c:34:15:73:a8:e1:b5:6f:05:46:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:C4:24:62:52:CB:AF:55:88:20:9A:7F:B8:93:45:8F:1C:4C:D9
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:d2:56:7b:fa:4c:f3:1e:67:72:79:dc:a1:f8:aa:b6:dd:
77:7f:b9:66:52:77:17:e3:66:35:c4:c2:29:83:3c:9b:93:b8:
d8:03:be:97:7c:12:2e:b8:bf:5a:df:00:b8:6b:ec:d8:3a:57:
64:a2:c2:16:d4:a8:69:04:9d:3b:ce:61:6c:37:dc:d6:df:c7:
ee:35:80:72:9f:ce:6d:0e:2e:40:3d:78:cc:14:fb:51:ec:0f:
a5:1a:11:65:9f:1a:8c:31:25:7e:8c:4d:03:f3:ad:84:f7:8f:
a8:78:24:b8:11:a8:66:1b:0c:18:e1:8e:d3:5b:b8:98:dd:25:
6c:af:93:eb:23:39:4c:74:d1:98:68:be:fa:98:18:cf:2b:16:
62:6b:e8:e1:93:ef:ee:fc:75:a3:22:dd:5a:1f:14:b1:92:cf:
75:fc:11:4f:56:61:1e:e8:c6:32:b0:8c:f4:bd:4d:ee:38:79:
45:43:79:7a:dc:b7:31:45:be:0c:69:11:29:57:7b:7f:3f:fa:
45:23:f8:35:d2:4f:76:fd:d8:b9:c3:04:c3:79:73:66:06:b0:
01:b2:b2:1c:8d:fc:47:a4:55:88:f6:20:4d:cc:97:1a:1c:46:
dc:f5:08:04:8f:d8:9a:7f:a9:fa:db:e1:99:ba:45:5d:2b:b3:
3a:78:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:24 2025 by rpki-client