Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: +UVZ3k71H6WhYsxWEfQyp9eTzzLXCIi9Fz3nqKr6BTQ=
Subject key identifier: AA:87:2E:66:F2:01:68:CB:AB:58:B5:5C:E8:17:2A:0C:F2:A3:F0:C9
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 01976C2B3E6F76E891D5366B2476C4FC33E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:01:02 +0000
Manifest this update: Sat 14 Jun 2025 02:01:02 +0000
Manifest next update: Sun 15 Jun 2025 02:01:02 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: wMDIxvK41U30bmllzVjKwH27ilEfW3PylDWP3gjp7q4=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3e:6f:76:e8:91:d5:36:6b:24:76:c4:fc:33:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jun 14 02:01:02 2025 GMT
Not After : Jun 15 02:01:02 2025 GMT
Subject: CN=aa872e66f20168cbab58b55ce8172a0cf2a3f0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:c9:27:fc:7e:e7:1a:e6:5a:c5:bd:dc:cf:
97:30:6a:c6:8f:70:c9:e4:80:46:fe:a4:6a:22:db:
f7:36:9e:61:ac:d7:2d:ba:00:fa:2f:0c:a8:2a:3c:
58:31:31:26:a6:b9:50:38:5f:a6:dc:00:ba:f3:9e:
81:c8:d0:fc:52:b8:f7:0b:64:06:54:25:f6:76:44:
16:24:7a:cd:5f:6b:a2:72:5f:a9:93:68:ae:b8:76:
c4:aa:dc:9f:18:25:f7:0b:0f:1e:63:f5:1d:75:b3:
16:bc:e3:f8:4b:84:66:87:6d:2b:a4:6e:f1:c2:db:
e6:8b:b1:af:ab:b3:55:25:dc:da:2e:de:94:c6:e5:
a5:ab:00:66:6b:6b:f8:76:06:86:8a:45:67:81:33:
ef:53:41:f2:00:8d:8b:ae:d4:f5:05:a3:17:a6:98:
4a:1d:a1:46:a8:e0:72:45:30:11:c6:b2:89:06:34:
84:b6:ab:ce:64:e8:79:39:4f:6e:77:86:14:3f:1c:
88:04:9c:59:25:8e:4c:76:58:92:57:88:68:0a:7b:
b8:5b:6f:f5:09:c4:0c:1c:99:43:75:16:7b:b4:77:
52:a4:6b:6c:43:e1:44:02:59:fb:f4:f7:6c:ab:c0:
97:ff:bd:2c:17:31:4c:f6:2d:f1:6b:a3:7d:ba:18:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:2E:66:F2:01:68:CB:AB:58:B5:5C:E8:17:2A:0C:F2:A3:F0:C9
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b6:5e:7f:48:1a:c4:c9:10:86:46:8a:59:06:51:4a:44:0e:
f7:92:ed:59:1b:54:49:68:e0:68:39:1c:e7:30:64:5f:4a:62:
d4:71:fb:28:71:1c:4b:ec:28:38:30:07:94:cb:01:5b:a7:23:
a6:82:6f:ca:d7:6c:23:07:a1:24:cf:97:3b:6b:f5:be:8a:fd:
af:18:06:9d:26:b4:bb:34:62:91:a9:04:14:14:60:21:00:cc:
38:2a:9e:e8:76:c6:0e:f8:25:d9:ea:80:55:f3:5d:11:7e:14:
b7:5c:8e:4e:a2:f5:ab:8a:77:61:7e:99:2f:49:0e:31:0a:98:
19:a5:15:0c:c5:fe:91:04:97:47:b0:33:2e:05:6e:32:00:1a:
f6:48:1e:96:69:56:46:25:a0:74:79:86:d6:2f:0b:bb:85:dd:
bc:a3:e3:c2:d6:47:dc:b9:2c:1e:1f:87:1e:f4:82:5c:98:95:
4a:9e:7d:72:42:52:bb:07:85:26:f3:62:0a:a0:b7:a7:da:20:
e5:7c:3d:eb:b1:0a:09:29:80:d4:3a:58:a9:dd:25:e5:eb:78:
1d:9b:54:de:f4:8c:b5:9f:94:3b:4a:a5:95:71:0e:7a:f0:77:
59:82:14:08:35:07:0a:93:6e:25:bf:df:4b:ba:21:36:0d:da:
08:de:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:48 2025 by rpki-client