Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: eTdlILjmk+XUqMnifvIwLERM6LJ5KoN3JPxSMZil1Mo=
Subject key identifier: BD:5A:9E:0D:4C:9B:91:F4:D8:F1:C4:10:74:AE:6A:AD:58:BE:0A:98
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 01978357EC2ADF2E9F0CF0DF4CEC818208D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 14:01:06 +0000
Manifest this update: Wed 18 Jun 2025 14:01:06 +0000
Manifest next update: Thu 19 Jun 2025 14:01:06 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: QH/ZxpPjI20Q3AqaZ0EWx/NCKzWn5TOWgJD7anO4Pz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:ec:2a:df:2e:9f:0c:f0:df:4c:ec:81:82:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jun 18 14:01:06 2025 GMT
Not After : Jun 19 14:01:06 2025 GMT
Subject: CN=bd5a9e0d4c9b91f4d8f1c41074ae6aad58be0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:b3:19:65:cf:ca:f4:2f:ff:cf:d5:fa:50:
ef:bd:dd:54:21:3e:0a:00:21:4d:6a:bc:d9:7b:62:
c5:78:ab:87:5b:ba:cc:5b:59:80:8a:cb:c9:4e:b6:
cf:31:49:5a:58:ed:49:7a:63:81:4c:d9:5b:4c:4e:
2e:29:ba:59:76:bb:6a:6d:34:b6:19:a9:db:61:83:
00:88:0b:7e:3d:fd:97:3f:ee:22:d0:ed:aa:19:4a:
b3:20:5b:37:18:9d:28:94:f2:e2:46:cc:5a:de:a5:
79:61:57:90:98:c2:47:68:59:b4:a6:b8:ce:2c:32:
0a:c2:89:18:6b:ef:ad:48:5a:f5:57:fe:29:7e:38:
e2:cb:57:59:db:da:8f:8c:05:bc:00:02:88:50:18:
e4:1c:42:8f:18:13:62:b0:39:6e:75:33:3f:9d:85:
46:f5:e1:78:9d:2f:a1:bc:08:0f:8d:2b:a4:d4:0d:
93:2b:fe:93:9c:53:12:c1:d7:e6:6a:81:50:be:36:
b7:06:cb:3e:b6:71:ef:c3:24:5a:cf:12:db:98:ea:
0b:ac:19:9c:63:aa:05:7d:ee:9d:9e:b6:cd:fd:ff:
aa:70:80:10:5f:ce:ec:00:93:9a:18:4b:aa:2a:6f:
6e:e2:51:da:ab:59:a9:5c:d0:e7:66:6f:9e:6c:ad:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:9E:0D:4C:9B:91:F4:D8:F1:C4:10:74:AE:6A:AD:58:BE:0A:98
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d6:89:08:ff:eb:61:1b:2d:d6:fb:48:60:2e:1b:a9:23:d5:
0b:54:71:1c:ee:56:c6:52:6c:7e:eb:34:68:0f:1c:06:92:a7:
fd:92:ce:f9:5c:d1:ba:1f:48:64:77:85:22:aa:a5:b1:98:8b:
b2:6c:1e:6a:e2:75:c0:d7:8e:2b:22:da:81:2c:d4:c8:5b:e3:
be:62:9d:87:dc:47:77:2b:c0:47:62:f3:19:80:da:64:a2:5b:
27:2b:ee:00:0b:ff:21:bf:ab:2c:ea:8a:f4:ec:e0:4a:fd:d4:
cb:f9:30:be:e6:91:b0:ba:52:4a:dc:23:5b:24:b6:8f:68:37:
74:67:d6:d6:d4:74:9a:b2:8c:93:b9:3c:79:7e:10:c6:6b:f3:
dc:47:32:6e:f6:16:4d:57:22:9b:36:67:97:1e:d0:50:4d:c5:
94:27:43:bc:5e:3f:b3:4a:c7:1a:3c:57:7b:2e:aa:e5:1a:e4:
a7:99:a4:48:18:41:1c:12:ae:ee:cb:c0:2d:3c:e1:a7:33:9a:
2f:f4:ad:47:42:00:98:d5:10:37:1e:fe:02:4f:5a:01:56:b7:
1b:36:86:b3:d6:1e:b3:a8:c5:e2:b7:32:b8:71:e6:b4:9d:2f:
4e:8e:42:65:b7:27:11:4e:d3:3c:42:bc:7f:0e:49:51:8f:30:
40:06:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:12:18 2025 by rpki-client