Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: T5VwJvWITHt+EJlPOnHiTMpEenTG5RjQeD2tjTRH/Ec=
Subject key identifier: 32:D1:85:E0:74:6F:47:CF:81:EB:1A:05:B3:E7:27:61:67:84:A9:6A
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 01976EF54F86EC35FBE93FCFE6458BF4F2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 14B3
Signing time: Sat 14 Jun 2025 15:00:59 +0000
Manifest this update: Sat 14 Jun 2025 15:00:59 +0000
Manifest next update: Sun 15 Jun 2025 15:00:59 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: QXT4XMAJDb9RBdSmLVOuStDWUkJLjXy2qrcHmvqD/nQ=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:4f:86:ec:35:fb:e9:3f:cf:e6:45:8b:f4:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Jun 14 15:00:59 2025 GMT
Not After : Jun 15 15:00:59 2025 GMT
Subject: CN=32d185e0746f47cf81eb1a05b3e727616784a96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:e5:3d:80:fd:47:75:ad:0e:23:56:07:9f:
15:57:48:cd:7a:2c:20:40:b8:e6:fd:56:a9:7c:a7:
18:38:88:9a:95:e7:73:da:ca:e9:2a:c6:1c:7d:12:
e5:c2:a1:16:a1:a9:2c:b5:79:34:af:58:6d:13:a6:
0e:3f:40:50:32:bd:e8:6e:e4:0c:59:e3:02:0a:d2:
3a:26:8d:c2:b8:08:77:98:5a:ff:d6:85:60:49:de:
23:62:e3:08:eb:03:0d:bb:ce:a2:b7:98:dd:40:d1:
37:87:d6:42:47:42:c8:c1:74:0f:a7:af:5a:ef:23:
a7:2a:e8:85:ea:56:d8:91:84:0d:06:93:f6:84:05:
70:6e:1e:68:de:13:74:e6:c1:f2:72:3f:16:8a:78:
03:fc:89:98:5d:58:b0:75:54:ba:8e:22:13:81:31:
5b:58:97:11:a3:64:d5:96:a7:03:2d:f7:75:e4:fe:
ea:3e:2c:36:5c:17:d3:5a:56:47:78:f8:5b:01:0a:
c5:80:e6:ee:1f:b3:7b:dc:be:37:d0:8b:30:1e:4f:
1e:8b:57:39:dc:e9:e6:1f:ef:88:1b:21:b0:18:37:
b6:c4:b5:eb:7f:11:bd:b9:e3:b4:20:45:5f:54:f1:
dd:54:c2:a9:db:b9:75:33:77:89:77:6d:d4:dd:ec:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:85:E0:74:6F:47:CF:81:EB:1A:05:B3:E7:27:61:67:84:A9:6A
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:9e:25:fb:59:f4:10:1f:24:5e:8d:2b:d6:76:d0:3c:df:
bc:e9:62:0d:a3:f2:31:4a:08:a1:cc:6a:34:46:43:84:f7:40:
d2:ac:b2:fc:f4:1e:96:f5:90:86:f9:3e:c8:1e:e8:e2:3e:c2:
dd:23:4e:65:6a:43:83:86:3b:3a:ef:8e:dc:a4:0a:3e:5b:ac:
24:45:b8:f1:4a:4c:9d:ef:7f:36:34:2d:78:c5:00:78:36:ce:
5d:56:7b:a2:94:7f:99:1b:9f:08:fd:71:19:7d:81:96:b0:23:
d4:cf:34:96:56:bd:46:70:99:fb:d4:68:e3:2d:43:75:f2:3d:
10:cd:45:b3:91:cb:e2:83:ab:50:b1:c7:d2:c2:79:68:63:b0:
a3:59:d7:b8:65:21:0b:20:04:88:6a:5a:ff:e2:31:9a:14:7e:
67:0d:65:43:3c:f9:7f:79:c0:6d:8b:0b:96:59:c7:b8:be:95:
25:db:97:73:2e:48:d2:49:e5:05:0a:1f:94:8b:fb:b6:d9:37:
67:55:a6:3f:27:d6:b5:e7:a7:ae:eb:1b:cf:c9:f3:5a:f1:ba:
ca:4c:7c:9a:09:34:a1:3f:5f:66:f4:89:87:5c:68:63:35:4e:
4a:f8:1d:e7:34:25:78:64:24:af:6d:49:ea:41:83:68:85:24:
9c:12:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:56:26 2025 by rpki-client