Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: OKsLPsiUkSP9cH4r/XLo10ysBVSRLzWOJPKTpYUvx7Q=
Subject key identifier: 10:21:12:68:F2:49:92:49:65:4A:86:F7:DB:89:E5:6F:81:F2:7D:82
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 01977452898D86674AA44F1F31519687D138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 16:00:55 +0000
Manifest this update: Sun 15 Jun 2025 16:00:55 +0000
Manifest next update: Mon 16 Jun 2025 16:00:55 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: t3FLm9KDlHXQke12HvgC+p/JBX8YkswI9EeIvmfrh5c=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:89:8d:86:67:4a:a4:4f:1f:31:51:96:87:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jun 15 16:00:55 2025 GMT
Not After : Jun 16 16:00:55 2025 GMT
Subject: CN=10211268f2499249654a86f7db89e56f81f27d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:14:a6:9e:7b:cd:2b:9b:46:86:ce:27:50:
ff:d5:47:26:2a:28:7e:1c:a1:08:0b:67:af:c8:d3:
a5:5c:a1:e7:56:60:e9:3b:3b:9e:9f:e9:7a:30:f2:
a2:93:b7:67:2e:36:03:74:6e:13:5b:a4:90:ac:c4:
43:87:e5:4d:dd:5e:a3:a7:51:57:b0:f3:0f:cb:7f:
56:8e:f5:3c:a5:32:76:8d:30:40:05:55:16:ba:7d:
86:33:b7:bd:b7:74:9e:72:bc:62:42:00:e4:6f:f6:
a6:fa:d7:e5:87:eb:38:e1:9e:f2:27:22:6b:5e:f9:
c1:7b:4f:df:9e:1a:43:be:98:18:05:46:88:2d:cb:
3a:09:c2:06:97:b7:a0:c9:6f:3c:bc:57:7a:65:5a:
33:b6:1d:56:f1:be:20:e6:8d:43:9b:7c:57:93:7b:
e8:59:64:49:8c:cc:bc:46:5b:23:88:43:94:7c:a6:
fd:12:a8:7c:ca:89:40:e5:03:78:79:c9:10:ed:59:
0e:c2:13:ce:73:86:fd:c0:0c:3f:c9:db:48:2c:f3:
67:36:ff:0d:73:b9:37:f9:df:4c:38:ea:af:83:d5:
ae:15:c1:38:54:bf:ea:db:11:a9:ea:61:39:87:55:
46:c3:05:6a:44:40:78:1c:3f:4a:0e:ef:a6:3c:93:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:12:68:F2:49:92:49:65:4A:86:F7:DB:89:E5:6F:81:F2:7D:82
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:0e:6a:ef:70:10:53:d6:e7:aa:44:a0:0c:2a:1c:f9:0c:
6c:b1:6a:4f:47:34:ec:d9:53:72:70:4b:87:c0:b6:e2:63:1c:
30:f2:1b:06:d0:36:58:bc:ae:28:0f:af:80:93:4a:a4:e8:07:
54:f6:2e:20:5d:f6:62:9d:ce:2d:34:c3:40:02:eb:3d:28:5d:
29:1d:7b:ff:44:d6:e0:86:8a:82:da:35:f8:fc:2e:d6:dd:87:
0e:d3:65:20:60:29:50:ba:f0:6e:8f:a0:df:3c:a2:0b:4e:c8:
45:ea:d9:ef:d4:00:c1:ea:4e:25:50:2e:9e:69:cb:7e:5b:2d:
46:74:68:b5:56:bd:15:f8:d0:54:8b:a3:29:33:c7:aa:e9:25:
38:e5:ed:fd:90:7f:83:82:b0:25:c2:d3:3d:ad:64:fb:7f:f8:
a8:84:28:9a:6e:bd:c0:c7:e7:21:fd:83:4d:9d:48:76:3f:cd:
b2:0e:d8:b9:2c:22:f8:8e:a5:51:e6:0a:c1:15:c5:be:30:d2:
41:ce:1c:03:c4:0d:71:32:e2:3a:1f:ca:be:07:fc:1b:b4:71:
ce:86:4f:fd:c4:54:80:1c:dd:f8:dc:e5:b6:04:44:2f:98:a9:
bc:ea:fc:d0:de:62:25:db:05:61:10:d3:6a:7b:9f:b1:80:4d:
a6:2f:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:16:51 2025 by rpki-client