Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: /8WU2d4n650C7JRCZM8v8XLg1qCd8oL36SmAf87JvJA=
Subject key identifier: A8:6C:65:3B:1A:E2:9B:7C:DE:B0:97:2B:AF:BA:C7:F1:EA:03:88:E1
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 01987ED3FA324F3A5E374D231BA565FC7AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 10:01:17 +0000
Manifest this update: Wed 06 Aug 2025 10:01:17 +0000
Manifest next update: Thu 07 Aug 2025 10:01:17 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: FLWc7uHd+PahPu5mcO/vJI/0Kkv896Qhcg8O4g/7uIM=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:fa:32:4f:3a:5e:37:4d:23:1b:a5:65:fc:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Aug 6 10:01:17 2025 GMT
Not After : Aug 7 10:01:17 2025 GMT
Subject: CN=a86c653b1ae29b7cdeb0972bafbac7f1ea0388e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:ec:a3:1f:1b:6e:fe:2f:80:51:75:be:a5:
aa:fc:1f:2d:d8:b9:e7:d3:06:d8:02:f8:c3:65:be:
3c:aa:fc:24:9a:22:06:8a:d8:8a:66:4d:30:8b:64:
53:0b:78:6a:d4:37:b4:de:42:14:ea:83:6c:6f:a8:
37:be:a9:f2:3d:08:ba:f8:13:06:d3:ad:4b:c2:0e:
30:5d:20:c3:f7:91:58:22:69:66:f8:44:81:dc:4f:
4d:ab:77:b8:ed:3d:ef:f6:08:22:70:b9:cc:4b:8b:
77:d7:6a:6c:b9:3c:04:79:48:45:3a:70:a2:02:b3:
e7:93:f5:16:0b:c5:00:bd:92:b7:40:0c:6e:5b:91:
90:c2:2f:fd:50:fb:c2:f3:fc:09:0e:71:90:5c:f7:
cc:06:a3:cd:14:b9:26:90:a3:a7:0c:a8:d7:d3:0b:
9f:13:cb:b1:4c:5c:ae:c0:be:e3:32:44:29:18:18:
65:b4:92:3d:a7:cb:5b:20:7d:b1:b1:b0:69:41:4d:
22:b9:c8:71:be:18:4b:7b:54:59:b7:39:11:38:14:
04:1f:60:2b:f0:e7:33:27:49:bf:ea:bf:4b:9c:f0:
bf:a3:b7:20:ac:8d:3c:6c:4b:b1:cf:28:fc:ba:99:
28:1a:c0:34:bb:8d:d4:e0:0a:ce:be:72:a6:69:c2:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:65:3B:1A:E2:9B:7C:DE:B0:97:2B:AF:BA:C7:F1:EA:03:88:E1
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cb:18:ea:6d:c0:e1:72:da:3d:e3:11:9c:e2:16:58:93:04:
32:b0:ce:20:bf:d0:8c:6a:56:72:4b:43:c9:dd:59:ea:5a:ae:
34:b8:d5:59:44:54:43:f1:71:ba:18:da:f8:8d:44:18:ed:43:
4f:37:35:39:1f:c0:bb:1f:be:45:80:e8:e5:fc:18:20:f0:9a:
b4:07:5f:63:14:a2:f2:f3:c8:7f:8f:6b:b3:8d:d2:79:82:3e:
79:ec:32:72:cb:91:98:27:de:6e:7a:79:74:47:f9:bd:bc:3e:
a2:4e:94:09:77:7d:ad:16:81:32:dc:a7:26:75:3e:ab:00:6f:
13:ca:c5:db:81:9c:b2:d3:46:d7:c2:96:c1:6d:e7:be:37:12:
3f:cc:04:21:40:24:5d:58:eb:35:c8:b9:fd:9d:03:32:51:54:
74:25:a9:d9:18:0c:51:28:2f:c2:39:4d:37:98:a1:e0:36:5c:
76:a3:a4:15:70:c3:c1:cf:74:e7:ef:ee:07:ab:cf:ce:56:37:
d8:9f:05:a1:1e:b2:cc:aa:a5:ce:13:7e:19:05:3c:bf:9c:cd:
1b:88:b7:15:48:d5:61:1d:e7:84:67:ed:7a:2d:a4:15:f1:d5:
53:2e:1a:89:c0:7d:ce:bd:5e:8f:42:08:bd:1a:73:20:52:7a:
4e:9d:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:30 2025 by rpki-client