Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: DGqCGFgt3rkO32U9LtJzRI0DaPcZ3lePew9KcRkfZ2s=
Subject key identifier: A7:E8:8D:27:6A:B1:60:EC:A6:3D:A6:7F:F2:B5:5E:80:0C:FB:38:CF
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019774F7D0D0C29528EFCAE748A4C1E6A808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 09B8
Signing time: Sun 15 Jun 2025 19:01:27 +0000
Manifest this update: Sun 15 Jun 2025 19:01:27 +0000
Manifest next update: Mon 16 Jun 2025 19:01:27 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: dqZF2tXGKnCu7BeP/vPjx/4lyadyEXGKJvSLEbjD2sU=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:d0:d0:c2:95:28:ef:ca:e7:48:a4:c1:e6:a8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jun 15 19:01:27 2025 GMT
Not After : Jun 16 19:01:27 2025 GMT
Subject: CN=a7e88d276ab160eca63da67ff2b55e800cfb38cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:8c:42:88:13:56:35:e0:1b:18:18:37:e6:
11:88:d6:d3:55:be:12:4f:9f:ed:49:7c:2b:45:69:
b4:b5:c1:17:34:d7:b7:2c:48:b7:06:f0:99:45:46:
be:58:9b:46:7c:86:35:f4:8f:32:2b:ee:6d:1f:21:
be:cb:b4:78:b0:fe:96:5d:ef:dd:e0:86:49:de:61:
08:d4:0f:44:90:3f:97:75:40:9c:28:84:f3:4b:22:
6a:49:f8:3b:e4:e7:81:91:49:71:c8:46:59:8b:58:
84:94:b8:a9:1b:6c:8a:5b:00:93:34:a0:b4:b3:cb:
0e:76:7b:7e:a2:c8:84:73:f9:eb:93:a1:4b:6a:2e:
bb:c2:b1:88:ef:97:48:0f:52:e4:dd:25:00:7b:19:
65:a4:7e:8b:55:93:e4:01:c7:93:f1:f7:78:ee:b1:
e3:55:56:77:7d:ca:04:8c:86:fe:8e:29:8a:5a:71:
28:54:1a:1b:a8:b8:3f:c1:78:ab:70:2b:95:bd:e1:
de:1e:47:2f:12:8a:89:48:23:b0:7e:b5:c5:25:69:
8f:ff:40:38:83:4d:47:06:f0:03:d6:64:13:59:8b:
24:f6:d4:3c:6d:db:97:a5:ac:62:f5:33:8b:5f:1a:
cc:b6:93:1e:b5:aa:9d:63:41:3c:c9:13:4f:bc:5e:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:8D:27:6A:B1:60:EC:A6:3D:A6:7F:F2:B5:5E:80:0C:FB:38:CF
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:01:85:1b:08:9b:dc:c5:fc:40:07:23:29:d4:08:ef:fc:
bb:70:e8:42:5f:68:1a:fb:45:3b:07:13:12:ea:d9:2e:7f:10:
97:04:5f:53:1a:62:09:c9:ef:d0:0a:07:1e:0f:48:c4:b5:11:
5f:8d:7c:1e:a4:2b:d9:04:92:14:24:f6:95:0f:59:02:14:0f:
13:6f:f2:b1:49:89:17:01:33:13:ba:bf:14:d8:77:38:f6:d2:
52:6a:4b:db:57:21:ed:65:cb:08:d7:3b:dd:90:b5:67:70:8e:
2c:ea:32:2d:cb:4b:db:ca:74:8a:9a:5f:87:79:5c:54:26:9e:
de:c0:a5:94:68:84:ae:5f:12:ab:57:b1:23:0f:e2:50:b3:12:
82:3a:ae:53:6c:48:af:be:41:13:be:89:66:f5:c2:06:6d:16:
66:d9:fe:2c:74:84:08:42:39:2b:13:c4:f3:fb:15:d0:07:a9:
8c:f5:5a:55:d9:25:1d:21:66:55:9e:4f:75:fb:23:20:30:53:
fd:cd:ef:19:55:1b:6f:30:62:e8:14:d9:f4:d5:44:17:38:56:
8c:57:3d:75:2b:0d:4e:c5:2b:2f:4c:f1:1a:be:c3:64:27:bb:
60:a3:ac:8f:f6:1c:8c:f1:30:6f:9c:ea:62:c7:20:f1:a8:ee:
51:8a:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:30:11 2025 by rpki-client