Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: 6L/FGE6TnI7c4u8QSkBgBq/+ngK51sbQHIux0z2OBxU=
Subject key identifier: 2F:E5:2F:34:3F:1A:0D:D7:D2:80:02:69:B6:53:DD:84:38:42:FC:03
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 01987298AB1ACF7CB1C44D8C4BE5C01870EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 0DD6
Signing time: Mon 04 Aug 2025 01:01:04 +0000
Manifest this update: Mon 04 Aug 2025 01:01:04 +0000
Manifest next update: Tue 05 Aug 2025 01:01:04 +0000
Files and hashes: 1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: iNALdhxRD6PDtYbljG+y8pYE58jkcDLszARerTIKfDM=)
2: d0esey8AL3oqWdpXKQi0WyV7ktQ.roa (hash: J4cOoBAYf62aaAeG5Hi7u+/pYelZ41GqNxwzMAQ75xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ab:1a:cf:7c:b1:c4:4d:8c:4b:e5:c0:18:70:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Aug 4 01:01:04 2025 GMT
Not After : Aug 5 01:01:04 2025 GMT
Subject: CN=2fe52f343f1a0dd7d2800269b653dd843842fc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:7c:b7:03:a3:a8:72:51:86:06:61:e0:c5:
39:63:94:e9:cf:17:6a:b5:d8:47:da:df:86:1d:6a:
7a:86:e4:f9:f6:5e:d7:82:03:0f:3c:91:ce:5f:3f:
fb:2f:4a:02:8d:e7:14:76:5b:00:56:95:32:36:c1:
8c:75:84:7a:8c:9b:fd:eb:86:86:cc:43:17:ae:65:
18:74:f1:8c:64:0b:84:1e:2c:d9:a8:f7:7f:f6:6e:
3d:3f:63:1f:e4:7a:a0:b5:c5:7f:35:c8:53:49:18:
9c:70:32:13:8e:fb:cb:82:c9:3f:9d:a0:c3:c7:e0:
13:27:8e:29:39:32:83:13:89:9a:91:c5:c5:3d:c8:
a5:14:72:49:11:f9:0d:72:59:ae:b0:47:93:03:ac:
9b:7b:c6:f5:44:ec:51:96:a8:09:d3:6a:70:b8:15:
32:35:e3:f9:e7:b5:21:18:60:4a:53:bf:b3:48:a6:
b4:49:03:77:70:14:47:51:e0:54:2e:f2:ba:2d:a1:
2b:a2:0a:3b:3b:8b:62:8c:50:48:c8:60:68:70:6b:
29:ce:f9:6c:dc:3f:8b:ef:b2:4d:12:8d:25:75:f8:
70:dd:49:8d:1e:fa:a8:90:b3:a8:82:7d:b6:ad:d9:
64:e9:46:15:c6:09:e5:87:c4:5f:9f:52:d9:8f:f8:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:2F:34:3F:1A:0D:D7:D2:80:02:69:B6:53:DD:84:38:42:FC:03
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b0:65:dc:f7:43:81:06:2a:06:22:db:c0:11:7a:8a:df:3e:
21:b4:52:b5:4e:a9:0d:9f:3c:9e:7e:b4:f9:2f:5d:4d:8f:6d:
e1:76:e1:00:1d:fd:c9:e7:9b:f1:1a:3a:7a:a7:b4:fa:ca:00:
93:c6:ce:b4:7f:cd:31:50:ab:e6:34:91:02:09:f7:3e:e7:54:
83:bd:dd:db:17:53:6d:f1:e5:3c:85:f0:9e:01:c3:4a:77:40:
f1:cc:7b:71:4a:f0:13:c1:39:ee:f2:c3:b4:20:ce:1f:93:54:
e5:a5:91:df:7d:29:c5:f5:83:80:a1:a6:e5:6f:9f:30:79:bd:
8d:fb:44:b2:e9:d7:5a:92:27:d3:f5:d9:57:87:de:8a:75:99:
e8:7a:f9:58:fa:40:30:34:7e:89:b8:68:8d:37:8c:d9:6a:b3:
74:2b:b4:89:fc:b7:0c:bb:46:02:f4:84:c9:f9:f0:72:f1:ac:
c4:fb:8d:38:ec:1b:d9:f3:9d:10:5f:78:1d:d2:0f:be:54:ee:
0a:1a:d4:7b:37:0c:51:4d:dc:28:b2:9b:48:64:e9:f8:50:73:
90:af:96:23:29:32:0b:1c:2f:60:54:be:0f:a8:bc:d2:7b:8b:
08:f6:fc:52:f1:eb:75:7d:a0:4b:e8:33:dd:78:64:36:ad:9d:
54:eb:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:05 2025 by rpki-client