Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: jutZ3RNfTQKjM/SpfNxmX6P93r+ForFYr7HpB25xeX4=
Subject key identifier: CE:98:11:33:CF:E3:D3:1D:51:AE:5E:BE:DB:D3:89:24:89:25:56:8F
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0197884670A75A42B2E5D5C40B8A509D2690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 15A0
Signing time: Thu 19 Jun 2025 13:00:07 +0000
Manifest this update: Thu 19 Jun 2025 13:00:07 +0000
Manifest next update: Fri 20 Jun 2025 13:00:07 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 5TDIrxrtSe82SEXEBbv2+HAMbkvAXoFf3Ite1EhoMY8=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:70:a7:5a:42:b2:e5:d5:c4:0b:8a:50:9d:26:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 19 13:00:07 2025 GMT
Not After : Jun 20 13:00:07 2025 GMT
Subject: CN=ce981133cfe3d31d51ae5ebedbd389248925568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:a1:21:8c:6c:89:09:9a:eb:11:02:65:de:
f8:25:a7:5e:62:04:bf:fb:34:21:7b:e1:10:e4:f2:
3f:c9:2a:e6:73:e7:94:9c:68:ec:bc:f6:05:04:2d:
d7:11:9b:a6:db:04:20:6d:e0:71:d4:be:d1:d5:cb:
16:3d:4d:31:3f:fa:de:2e:ae:32:e3:30:a7:e2:74:
57:f9:cf:1b:ce:d5:c5:89:63:80:b5:b6:8d:5b:12:
f1:98:26:cc:21:7c:54:5c:d7:14:48:21:14:17:2d:
77:ec:2b:80:41:6a:15:5f:cd:9a:c7:86:6d:27:3b:
36:5e:01:30:a5:a4:34:b9:a1:77:32:a9:5c:ff:3a:
b7:c3:c1:7e:02:52:e2:82:bc:90:bd:71:08:79:0a:
e8:95:58:86:09:5e:00:ac:4c:a6:0b:1d:2c:a2:9c:
a2:6d:30:1b:24:6a:26:01:10:3a:af:bf:e9:32:cc:
43:71:6a:95:71:37:ab:0d:f6:66:6d:4e:37:c8:31:
c8:99:51:65:d5:9d:8b:d0:a7:60:8d:4a:bd:22:2b:
7e:56:3a:1e:5f:70:73:72:fd:0f:6d:aa:5a:ad:bd:
e4:3e:7e:26:56:49:80:b7:69:4d:ab:69:3f:c4:41:
09:cf:f7:9f:2c:01:cd:e3:2d:1d:eb:00:81:f8:12:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:11:33:CF:E3:D3:1D:51:AE:5E:BE:DB:D3:89:24:89:25:56:8F
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7e:53:b7:1e:71:63:24:f5:06:df:c9:e1:0d:8f:45:97:c6:
ae:b1:d5:5f:98:94:77:4d:c7:83:57:17:c2:75:e8:6f:6b:fe:
2e:68:92:04:42:5c:93:5d:fc:8c:05:ed:6d:80:93:d1:7a:b3:
87:a9:be:b2:00:28:ef:98:64:bf:a9:85:d7:35:f2:62:04:0d:
2e:48:d6:94:89:a2:b9:8f:f5:a0:d7:4f:57:74:2f:69:f8:eb:
14:68:92:6d:a6:bf:2c:1c:55:44:91:34:02:34:5e:04:f4:aa:
67:ad:10:be:3f:2a:31:04:c1:87:e7:f8:f7:b6:4d:bb:e7:10:
54:29:b9:8f:89:42:a1:1b:e3:16:f4:3e:8e:a7:40:99:3e:41:
df:10:39:e7:d1:c1:87:12:38:69:80:67:57:62:70:ed:36:98:
5a:8b:67:ce:71:9e:07:8e:7a:c6:de:ae:f6:de:47:73:47:af:
ad:d1:cc:10:7b:08:1d:18:e9:39:51:97:41:6e:b5:1a:7f:39:
7e:00:1d:0e:1a:b3:59:34:18:b1:76:a4:1c:d5:78:96:8c:4c:
0c:fe:6c:60:0b:24:e2:5a:bf:7e:53:a2:c7:2b:34:7a:a2:77:
e6:e7:9b:45:bd:3b:4c:ef:2a:b4:fc:19:99:1d:6d:27:27:bd:
fd:8e:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:10:16 2025 by rpki-client