Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: a0TzcfjEfEJIOugK5a1t/iUJaCvvKKbd8Nnf8vWcKr4=
Subject key identifier: 8C:3B:2F:F0:68:59:5D:D9:F2:65:20:B3:7D:26:4E:D5:1F:6C:18:17
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01988543FF9575D7C86CCDEE5A9E9D09E5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0EBC
Signing time: Thu 07 Aug 2025 16:01:22 +0000
Manifest this update: Thu 07 Aug 2025 16:01:22 +0000
Manifest next update: Fri 08 Aug 2025 16:01:22 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: rxepnVn//DOcADmxPu7bomhObRs18IyOQoSMCQ0hswo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:ff:95:75:d7:c8:6c:cd:ee:5a:9e:9d:09:e5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Aug 7 16:01:22 2025 GMT
Not After : Aug 8 16:01:22 2025 GMT
Subject: CN=8c3b2ff068595dd9f26520b37d264ed51f6c1817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:e6:16:ae:76:e1:85:84:8e:9b:0a:15:a0:
97:40:23:dd:ef:ec:ca:6f:9c:38:d9:09:91:c9:df:
1e:1f:98:9b:12:84:b3:23:05:31:e6:11:a0:25:00:
4b:52:70:75:91:2b:5b:05:b3:1f:3b:96:08:2d:e9:
be:d1:99:93:d3:d2:9b:1e:08:82:4b:0f:0c:80:b1:
83:e4:6e:9c:9f:f9:42:84:40:72:a0:42:55:61:a2:
2a:e1:6e:07:9c:07:4e:34:c9:5d:a4:ab:85:fe:d4:
6e:03:cb:69:2c:ba:5d:1a:f7:46:d4:f3:5c:d9:4d:
e2:a4:63:99:f9:d7:b5:df:f5:41:d9:8e:a2:b1:44:
dd:ce:95:e7:d0:fd:97:58:91:86:54:41:65:04:e4:
47:97:17:1f:a3:b4:79:fb:aa:f7:8c:df:df:b3:4a:
32:a7:c8:be:19:a2:c8:09:69:a8:6c:2b:91:98:aa:
f3:b2:6a:61:cf:71:ec:2b:d8:64:53:b3:31:7e:69:
e8:0f:fc:71:a5:e1:04:19:41:c7:a4:d8:87:94:c9:
1b:dc:4b:bd:be:94:69:85:bd:e5:6d:d6:0f:00:e6:
33:d1:7a:2a:d8:fe:a7:5d:a8:b7:70:f9:3e:f7:aa:
64:ce:25:e4:3f:24:9d:4b:28:ce:ce:3f:49:b3:e9:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:2F:F0:68:59:5D:D9:F2:65:20:B3:7D:26:4E:D5:1F:6C:18:17
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:2a:07:06:ac:d0:86:3d:b8:b1:83:c3:dc:8b:34:69:86:
39:11:50:0b:df:4d:05:27:d6:da:3b:03:ea:cd:bd:f7:85:69:
47:49:ac:87:1f:ae:db:16:92:8b:60:56:9a:69:5b:12:a1:43:
c4:73:a9:4f:d9:54:36:6e:1b:6f:34:c3:b9:41:28:cd:12:79:
0a:c3:62:74:ce:93:78:32:a0:c8:42:49:1b:b7:33:d1:2a:7f:
e6:e5:aa:c0:bc:7a:36:b4:e6:9d:8c:ba:f1:71:bd:14:29:8f:
d9:70:c4:ce:a8:ad:8e:4c:f6:dc:23:b2:db:4a:b5:b4:68:51:
72:ff:b9:32:81:aa:51:4d:dc:d4:9f:69:e5:0d:ff:01:d2:b3:
df:26:87:6e:b4:82:5c:c6:43:fa:2e:d2:71:cc:0b:55:2f:e0:
43:64:96:14:60:95:dc:ae:ce:bc:9c:71:ef:6d:12:cc:88:05:
af:72:c9:b7:b3:cb:7a:dd:af:02:8a:06:62:ff:a3:79:84:b5:
9d:e0:35:92:89:fe:63:2f:7f:8d:ef:1f:5e:e8:c2:9c:76:85:
11:4f:94:5d:43:b9:d3:2c:d0:26:de:88:6a:31:ed:d3:f4:47:
9c:99:c1:c6:d2:b9:30:52:d9:24:58:4f:dd:14:6c:f3:77:2a:
61:67:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:25 2025 by rpki-client