Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: UiCWVmkKkxA7OJiNaXcjIcLoCDb00fzcQmlux7ybF6Q=
Subject key identifier: EE:32:22:5A:05:31:8C:3A:56:FE:CF:CB:70:9E:5A:95:B6:4A:7B:0E
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01976A3CFB70F57EF0D8C9BE97D14CE679F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 0DF4
Signing time: Fri 13 Jun 2025 17:01:10 +0000
Manifest this update: Fri 13 Jun 2025 17:01:10 +0000
Manifest next update: Sat 14 Jun 2025 17:01:10 +0000
Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: gWo83Oqq4X59AKKTpZAkOsPE3QHgjjLhD0BT+UqeQZQ=)
5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:fb:70:f5:7e:f0:d8:c9:be:97:d1:4c:e6:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Jun 13 17:01:10 2025 GMT
Not After : Jun 14 17:01:10 2025 GMT
Subject: CN=ee32225a05318c3a56fecfcb709e5a95b64a7b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:70:75:f3:d7:92:41:62:ef:dd:f2:8c:ca:
33:9f:f1:f7:9e:f4:d7:3a:87:66:46:da:b3:0f:5d:
51:9a:7b:84:84:41:57:81:21:9e:20:d5:74:7d:64:
08:81:fe:37:31:e7:1f:0d:39:a1:fb:25:7b:00:e0:
97:1a:fa:1c:6d:dd:8f:ec:4d:81:53:b7:fe:3a:a5:
36:0f:c0:d8:26:e5:df:95:c9:63:e0:fd:33:b8:0b:
2c:ed:59:84:8b:f0:9f:1e:ce:ac:43:d3:15:36:b8:
c0:7d:c3:b8:fd:2c:2f:cf:f1:b4:b8:aa:3e:b8:cd:
cd:ad:78:1f:be:97:4b:45:43:4e:ec:68:4c:f5:ec:
37:1a:c4:e1:84:98:c3:95:3b:3a:c4:ce:b2:0f:54:
58:f2:2a:91:11:ee:f3:82:89:7c:18:79:10:10:da:
a1:29:b7:64:96:c9:85:88:d0:59:91:22:3d:39:76:
85:67:ea:99:7f:15:08:73:5d:87:96:46:aa:8a:03:
65:d6:41:20:5a:88:91:06:a3:cb:e9:99:88:02:52:
b1:68:3c:d7:da:bc:0a:c3:38:01:87:84:57:85:19:
05:5f:0b:5e:92:65:4b:a2:b0:3c:ca:6d:95:9c:14:
25:66:5c:76:5f:b5:9a:33:7a:47:ae:d3:b5:0a:05:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:22:5A:05:31:8C:3A:56:FE:CF:CB:70:9E:5A:95:B6:4A:7B:0E
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:18:3a:56:94:c5:a5:b5:51:c0:59:ca:32:ed:6c:62:31:af:
71:64:3c:83:de:71:ea:37:6d:42:13:8c:38:7c:46:22:68:ea:
bd:71:da:5c:ab:2c:7f:5b:7e:66:5b:9e:5d:fa:9c:d5:db:f5:
b6:40:71:ce:3c:c9:a6:e7:3e:7a:01:c5:3d:08:d0:4c:1f:1e:
14:16:09:1f:c4:d4:a0:de:14:78:3f:d6:bb:3c:16:24:d1:0f:
bc:31:2b:67:a7:ef:75:b1:68:03:3b:f8:8f:72:3d:91:dd:ab:
b7:4d:41:01:11:20:b6:2f:8f:71:49:56:38:20:b6:bf:cd:9f:
cc:1d:9f:19:cc:3e:25:62:6c:79:f7:b5:98:ef:e1:6b:67:fb:
3e:23:cd:d2:64:f0:d2:84:93:48:1b:6f:85:16:ae:27:79:01:
64:5d:01:6c:fb:8c:13:10:2c:74:42:de:5b:94:6f:a0:e7:c5:
8a:32:6f:51:48:9a:e2:b1:4c:a7:47:0c:b2:e5:04:36:dd:1e:
d9:1c:f1:49:5e:66:44:b1:47:7b:09:f2:35:8b:a1:af:28:dc:
ba:e0:b2:30:56:52:1e:c6:f5:75:61:76:9d:1a:bb:95:58:e1:
67:f7:09:07:df:6b:47:8f:c3:fc:6f:54:79:a3:d3:7f:d9:fc:
d1:01:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:14 2025 by rpki-client