Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: BASO/L26Klq3QrBcyMHHa8RoMoZPC7FnDl7K0Nzi9vI=
Subject key identifier: A2:8F:58:23:81:A1:D7:F0:B9:F9:1F:93:59:5E:A8:29:E4:70:C6:C2
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 01976C6216BE91E81CA7100B4CC86AF7A1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 03:00:56 +0000
Manifest this update: Sat 14 Jun 2025 03:00:56 +0000
Manifest next update: Sun 15 Jun 2025 03:00:56 +0000
Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: YHKOEIlAqVG02o5Qo/QX57JDow8MoljE9XWwt1v+0Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:16:be:91:e8:1c:a7:10:0b:4c:c8:6a:f7:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jun 14 03:00:56 2025 GMT
Not After : Jun 15 03:00:56 2025 GMT
Subject: CN=a28f582381a1d7f0b9f91f93595ea829e470c6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:bb:2c:e7:2d:c1:c5:49:1a:7a:a0:5b:5b:
9a:39:3c:9e:f6:27:36:91:5c:5f:20:db:a1:c1:7a:
7e:fa:49:99:9c:c5:cd:9f:05:62:ba:3c:c8:7d:88:
43:d5:e6:b7:4c:a6:93:50:4c:28:81:61:66:d7:89:
00:e9:0e:cf:cf:21:8d:99:e7:44:68:35:07:8e:61:
b6:6a:a0:7c:83:7c:00:32:88:c4:43:c9:77:81:27:
bb:7e:cc:65:3a:b2:54:18:14:e9:1a:ed:97:a3:d5:
74:45:ed:ba:d8:38:ae:a0:45:1f:a9:0f:eb:52:0f:
45:06:fb:91:97:8f:6e:60:f7:cf:43:c4:86:e5:03:
eb:fe:eb:f7:37:42:be:cd:7d:05:3f:ec:6e:a0:6b:
d3:dc:f8:40:46:b8:92:fd:1f:62:d9:6c:b2:31:cb:
19:df:f1:f1:12:12:fd:e9:7f:86:ee:bb:d6:c2:0b:
4c:ea:7a:56:b7:5f:3a:29:b6:83:63:96:e8:48:d9:
15:55:b8:b7:1e:54:f8:44:d4:52:38:2f:52:f7:de:
41:cc:cc:d7:f9:6a:4f:7a:50:34:47:80:a0:88:91:
2e:b5:43:6c:b5:8b:94:db:96:28:34:99:89:5d:67:
65:b7:f4:63:86:d6:b2:64:39:22:26:50:d0:82:bc:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:58:23:81:A1:D7:F0:B9:F9:1F:93:59:5E:A8:29:E4:70:C6:C2
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:01:07:f6:b3:05:8c:dc:87:10:ea:68:1d:26:91:0f:57:
b1:1a:66:12:64:4c:5f:b0:8f:84:fc:bc:7e:41:71:43:65:91:
1c:27:05:34:72:bf:78:ee:02:50:28:a5:03:49:af:7e:fb:22:
31:7f:5f:94:a1:e8:c8:ac:fb:1d:8a:80:40:56:e0:1f:ac:b8:
08:cc:2c:75:4a:c8:b8:e8:33:9a:b5:b5:10:21:48:07:85:05:
0f:83:1b:e8:2e:d3:47:65:8b:61:77:ac:10:ac:4b:92:d4:48:
dd:16:02:16:32:c8:02:e1:d6:c0:21:23:40:53:78:86:d8:b3:
e6:f3:7c:54:35:b4:1c:ee:14:8e:f8:58:40:2c:32:ae:87:ee:
98:23:29:fe:6f:05:c7:1b:45:36:ea:c6:96:ed:50:7a:5a:b3:
fd:ee:12:c7:d6:ae:02:c7:fe:ee:62:d2:61:2d:47:66:88:d5:
bf:a0:a3:77:13:b7:df:ff:a8:61:56:ca:50:b1:84:f7:1c:03:
26:c8:56:14:9d:94:f7:a6:67:fd:5d:6f:bf:05:42:7f:5d:34:
58:f0:dc:4c:3c:e6:eb:80:0e:89:54:7c:2a:9c:5b:49:2f:ba:
ca:32:01:39:38:05:50:09:1d:fa:4c:2d:36:7a:e1:30:18:2f:
f3:08:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:16:23 2025 by rpki-client