Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: EP3kppo3UIu6GYQhXPd66rOGa0U/Cjj3+uCJE5cWY/w=
Subject key identifier: 69:12:87:22:E1:F9:FE:66:88:AD:53:D9:44:56:98:4D:44:40:C5:C7
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019872986E7C5F2B69A1074D53BE0C3A32E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 01:00:48 +0000
Manifest this update: Mon 04 Aug 2025 01:00:48 +0000
Manifest next update: Tue 05 Aug 2025 01:00:48 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: pysU8aVfB/Us/vFmvqKyT5JxHDc8SXgTVQ8MJZrVcSY=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:6e:7c:5f:2b:69:a1:07:4d:53:be:0c:3a:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Aug 4 01:00:48 2025 GMT
Not After : Aug 5 01:00:48 2025 GMT
Subject: CN=69128722e1f9fe6688ad53d94456984d4440c5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:25:5d:31:82:56:b8:af:1a:51:83:a9:8c:
4a:6d:94:cc:f2:f0:1b:b1:be:c9:b4:ab:12:f4:fa:
94:d2:f6:af:bd:15:20:ee:7c:e1:d2:44:72:c8:79:
8f:c4:68:05:1f:7a:80:a3:44:7a:29:e3:5b:34:94:
38:6e:11:02:22:d7:52:23:e4:a4:c2:a4:e0:46:a8:
02:e1:d3:d6:6b:f5:8e:e0:52:6b:ca:82:27:91:95:
96:99:6c:58:03:41:39:20:d0:45:25:d6:18:ab:33:
0d:48:06:40:09:8a:8a:2f:19:d8:1d:a8:a4:7a:3a:
8e:38:cf:9a:27:2a:17:10:83:87:de:fa:5b:c0:e9:
82:2c:52:f6:35:92:eb:02:39:a9:af:32:d1:62:b2:
87:8c:51:42:7c:19:15:31:00:62:54:9d:0e:df:48:
74:a4:23:75:dd:d1:2b:5d:19:25:c9:2b:a3:41:e6:
e4:17:78:11:c9:cb:82:7f:56:b7:7e:84:ff:0f:0f:
49:3b:0d:08:5d:a4:17:ff:51:5b:ad:21:03:83:dd:
0c:3b:25:ce:48:46:57:7d:43:22:4c:cf:26:47:70:
c9:9c:89:af:5d:4c:c2:bb:51:ea:b4:8d:0b:c9:fc:
5b:49:23:df:25:02:7c:cc:2a:c4:a4:17:0d:59:99:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:87:22:E1:F9:FE:66:88:AD:53:D9:44:56:98:4D:44:40:C5:C7
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:35:02:d8:b6:53:a7:17:98:aa:62:f8:8b:5c:ae:e1:11:d7:
5c:0a:84:69:b6:b8:c7:ea:3d:68:31:ab:ab:82:ee:10:2d:c6:
6f:68:f9:de:bb:86:22:4a:9c:45:a4:49:4c:8f:ac:db:c3:06:
88:13:a6:4a:2c:40:61:8f:82:11:9f:14:72:de:01:7e:1a:c9:
92:ae:25:66:ef:bd:6d:2a:6f:d3:bb:fc:78:bb:85:16:92:96:
a4:89:a1:10:fc:ad:1c:12:78:f9:6a:7f:5c:ed:d0:3f:78:85:
53:9b:3b:9e:4d:ce:6f:ae:cc:58:e9:26:18:5c:90:3e:13:ea:
b6:5f:c8:9e:1c:ca:aa:10:0a:69:4d:9c:88:9a:a3:ea:08:c9:
af:34:bd:0e:df:04:64:42:fe:52:85:e4:8c:0a:09:80:ca:35:
96:c0:e9:d1:4f:53:56:86:56:ca:6c:35:c0:98:c4:41:91:09:
6a:17:aa:9e:b0:2e:67:a3:09:10:3a:8f:c9:84:e8:39:85:c6:
13:3a:00:fa:c2:fd:dc:1b:64:92:6a:8c:2b:92:4d:13:1d:27:
5e:96:8e:98:e4:df:cd:2f:62:72:d3:6a:e7:13:45:8b:e5:5b:
50:02:bf:b8:0c:d6:c3:ee:c2:83:7b:64:50:f9:09:0f:8d:ae:
33:bc:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:48 2025 by rpki-client