Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: oO0UABv4bTsUNmlNHr/5QmENpL3GNIUvCAZ7dyMX+jo=
Subject key identifier: 7D:EA:1B:CD:4D:C4:49:F6:A9:83:54:AD:01:CC:3B:38:67:DB:04:A9
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01977FB194934CD3A758335470E1DE1027CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0324
Signing time: Tue 17 Jun 2025 21:00:33 +0000
Manifest this update: Tue 17 Jun 2025 21:00:33 +0000
Manifest next update: Wed 18 Jun 2025 21:00:33 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: KPUVtmvI/mTxNi23pbakqj2YLNzsk3FcT58URS8gmS8=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:94:93:4c:d3:a7:58:33:54:70:e1:de:10:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jun 17 21:00:33 2025 GMT
Not After : Jun 18 21:00:33 2025 GMT
Subject: CN=7dea1bcd4dc449f6a98354ad01cc3b3867db04a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:15:68:a1:bc:3f:bc:d5:6c:dd:a7:ec:5e:
18:49:64:db:eb:78:23:9f:71:d1:d6:f6:6b:29:97:
da:76:ed:34:10:39:9d:ba:69:10:5a:d7:ea:fe:33:
8f:d3:91:26:f8:80:32:09:26:3e:a5:ef:b0:1a:d8:
a3:25:da:77:c8:e7:2c:ea:39:6d:89:56:01:18:f8:
87:f3:d1:13:2f:a6:3a:52:dc:62:f2:37:0a:93:af:
a9:7d:77:25:c8:a9:ce:f0:a1:f9:a8:17:64:04:6f:
5f:d9:6c:54:cc:64:77:b6:9d:11:2f:69:a9:f3:08:
c9:a6:a9:28:ee:ea:c6:30:0a:cf:4f:21:8e:d7:fc:
77:9a:da:f1:70:1c:e7:a6:fb:e1:61:f8:fd:4b:d2:
66:b3:83:02:bc:a7:74:77:7f:d3:75:72:d7:dd:e9:
7b:a9:12:30:5e:36:bc:af:1a:9b:2b:e1:a3:8a:4f:
ff:4d:19:d8:3c:19:90:93:4d:12:28:8e:f9:c7:b5:
3e:c9:8f:26:49:11:ee:d8:7b:39:26:69:b8:1a:c7:
58:f5:ab:bb:1b:46:81:50:46:5a:02:9e:31:03:6a:
9a:5b:77:6e:bd:bd:42:d2:e0:78:27:ad:ed:3b:7b:
70:1c:57:54:9e:8c:78:34:f1:11:b6:ee:fc:48:c6:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:1B:CD:4D:C4:49:F6:A9:83:54:AD:01:CC:3B:38:67:DB:04:A9
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c9:19:ea:4a:da:fc:25:20:90:e1:a1:14:4a:28:7f:51:01:
43:af:a3:1c:03:c8:94:f2:b1:de:c3:d7:a6:78:a9:1e:d4:8b:
de:10:10:85:9b:64:94:4b:e5:1d:85:7a:35:27:1f:6d:45:e9:
27:28:96:53:c7:03:d4:77:2f:78:70:d1:a5:25:b0:51:01:01:
6d:d9:ac:7a:a2:7b:5c:bc:58:2f:47:7c:ea:22:5b:c1:45:df:
05:35:de:59:a7:47:fb:1a:a5:db:ac:0c:03:07:f9:43:fc:47:
f5:d6:7b:55:a5:80:27:39:33:0c:00:46:65:c3:aa:06:75:68:
4e:8d:5d:1e:a6:2a:f7:c3:49:8c:49:7e:8f:70:ba:43:49:a0:
04:5f:4d:2b:86:22:9f:e4:5a:b0:9d:b9:12:ed:ac:25:25:88:
bb:c0:e1:ca:7b:39:22:5d:de:c8:b5:1f:b1:c4:7b:35:6c:bf:
15:e6:0c:60:50:a2:ca:e3:09:5c:e1:82:20:42:25:04:c6:53:
61:3b:57:df:50:b3:d0:84:68:38:3e:b5:ee:6f:af:a7:0d:a0:
70:b3:08:35:e2:24:6c:82:01:16:05:4d:b5:c9:16:56:19:1a:
e8:f6:95:2e:46:3d:98:e4:d9:65:cb:f4:e9:38:97:69:83:23:
2d:3a:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:18:49 2025 by rpki-client