Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: /pFn64aXNPR7927Dakpl5FMhN3dHUtWWPd8sNzfqfGo=
Subject key identifier: 97:FE:8A:41:5D:15:EA:0B:77:A0:FF:5A:04:59:A9:9F:1B:E3:ED:0B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019897B7E090DAB1F58C991C5B3ED67BB119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 03B5
Signing time: Mon 11 Aug 2025 06:01:06 +0000
Manifest this update: Mon 11 Aug 2025 06:01:06 +0000
Manifest next update: Tue 12 Aug 2025 06:01:06 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 0AijrJ5fQpcrQuYRKzLM7V+59cSR/9fPP8qSJorcs7E=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:e0:90:da:b1:f5:8c:99:1c:5b:3e:d6:7b:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Aug 11 06:01:06 2025 GMT
Not After : Aug 12 06:01:06 2025 GMT
Subject: CN=97fe8a415d15ea0b77a0ff5a0459a99f1be3ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:5a:1c:f7:bb:c7:17:92:33:42:40:9e:c6:
96:ca:9a:1f:85:16:4d:af:9c:7e:6a:d5:ff:33:61:
58:5e:35:9e:1c:d7:51:72:07:93:98:c3:1a:71:5f:
ca:24:65:e4:c7:cc:b8:7f:31:f0:d8:ac:01:b5:00:
16:73:8a:9f:f9:aa:55:5a:f1:e7:39:87:ae:64:b5:
77:c4:15:54:53:59:ae:65:32:42:22:45:02:3a:3e:
45:e8:32:0f:76:fa:6c:f6:48:15:8f:ba:e0:61:fa:
a6:7d:46:b8:fe:8e:64:72:3e:31:dc:f1:4c:c9:6b:
71:cb:fd:74:8b:e7:f1:0f:5b:9a:02:43:5f:85:96:
5b:93:f1:e5:c6:10:de:fd:74:e1:18:fe:ce:b3:c0:
c6:d9:a8:bc:a9:92:9b:cb:1f:4e:e4:ad:4a:f0:97:
e6:a1:40:cf:ac:ab:36:d4:35:a1:7b:ba:60:fd:eb:
a0:d2:75:49:ef:75:bf:84:ba:50:0b:28:0f:6f:8a:
f6:3d:51:d1:f8:08:8d:42:97:15:3d:a0:e6:ed:cc:
08:ae:90:10:a2:99:52:7a:ac:12:a2:42:cf:1a:1c:
23:b2:a5:9b:8d:9a:ff:30:67:22:60:2b:50:f7:0e:
4c:ba:45:a1:26:62:aa:b5:f5:bf:38:e1:ea:3b:bb:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:8A:41:5D:15:EA:0B:77:A0:FF:5A:04:59:A9:9F:1B:E3:ED:0B
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:eb:3c:29:28:d9:d5:6e:0f:39:65:69:c9:5b:bb:19:0d:
74:82:cb:3f:e0:fc:c6:47:5f:d2:d2:0d:32:7b:42:cd:e5:fa:
88:6b:59:3f:e2:7f:a5:d4:99:3f:d9:34:ab:f4:32:40:8b:ee:
ec:47:8b:eb:b2:9b:e2:79:c4:b1:a7:50:a2:4f:c0:9c:45:17:
34:1e:27:9e:e0:10:f0:51:58:0f:76:a3:72:27:d7:ab:af:60:
9c:4c:b7:8c:7e:73:9b:f8:fb:52:e7:86:f9:5f:28:84:54:32:
11:57:f4:9b:c2:41:71:c2:44:92:07:94:a3:ba:3b:2e:3b:d9:
49:9e:be:3c:9a:61:48:d2:8f:0e:3a:44:4f:a8:a3:03:41:9f:
ec:6f:31:99:59:28:b0:5a:da:70:f6:37:e3:fc:3f:ec:73:ca:
5c:e4:9f:54:d1:a9:b0:77:e0:8a:d6:87:ee:fb:85:70:10:79:
b5:45:d2:b6:a8:7f:f8:53:b9:a3:85:28:b5:a7:ca:db:82:8d:
ae:61:27:7f:04:b6:0f:34:81:d8:83:57:8e:58:a7:73:28:a2:
58:6b:45:b9:c0:97:25:ea:e7:f6:cf:0a:4f:ab:eb:00:97:99:
fd:52:f2:97:49:6a:eb:9c:f8:3f:ce:b1:86:c1:d5:c1:06:4f:
51:04:73:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt+CQ2rH1jJkcWz7We7EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjUwODExMDYwMTA2WhcNMjUwODEyMDYwMTA2WjAzMTEwLwYDVQQD
Eyg5N2ZlOGE0MTVkMTVlYTBiNzdhMGZmNWEwNDU5YTk5ZjFiZTNlZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc5aHPe7xxeSM0JAnsaWypofhRZN
r5x+atX/M2FYXjWeHNdRcgeTmMMacV/KJGXkx8y4fzHw2KwBtQAWc4qf+apVWvHn
OYeuZLV3xBVUU1muZTJCIkUCOj5F6DIPdvps9kgVj7rgYfqmfUa4/o5kcj4x3PFM
yWtxy/10i+fxD1uaAkNfhZZbk/HlxhDe/XThGP7Os8DG2ai8qZKbyx9O5K1K8Jfm
oUDPrKs21DWhe7pg/eug0nVJ73W/hLpQCygPb4r2PVHR+AiNQpcVPaDm7cwIrpAQ
oplSeqwSokLPGhwjsqWbjZr/MGciYCtQ9w5MukWhJmKqtfW/OOHqO7u5FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf+ikFdFeoLd6D/WgRZqZ8b4+0LMB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE7rPCko
2dVuDzllaclbuxkNdILLP+D8xkdf0tINMntCzeX6iGtZP+J/pdSZP9k0q/QyQIvu
7EeL67Kb4nnEsadQok/AnEUXNB4nnuAQ8FFYD3ajcifXq69gnEy3jH5zm/j7UueG
+V8ohFQyEVf0m8JBccJEkgeUo7o7LjvZSZ6+PJphSNKPDjpET6ijA0Gf7G8xmVko
sFracPY34/w/7HPKXOSfVNGpsHfgitaH7vuFcBB5tUXStqh/+FO5o4UotafK24KN
rmEnfwS2DzSB2INXjlincyiiWGtFucCXJern9s8KT6vrAJeZ/VLyl0lq65z4P86x
hsHVwQZPUQRzgQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 11:46:28 2025 by rpki-client