Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: +cQ1PqrvakYBJp8pQVKGlltLV9SVLy7HxLbHwvtH5bU=
Subject key identifier: 7A:D5:84:C5:EB:3F:16:F0:EF:41:09:DF:B9:84:F0:C4:40:B3:2C:8E
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 01976D7440836DA17BCD246476D3578E04D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0C26
Signing time: Sat 14 Jun 2025 08:00:24 +0000
Manifest this update: Sat 14 Jun 2025 08:00:24 +0000
Manifest next update: Sun 15 Jun 2025 08:00:24 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: 9otWDxAQVytyNElcoo4rUUFH+z9ZhpBEphds8dz6lGU=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:40:83:6d:a1:7b:cd:24:64:76:d3:57:8e:04:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jun 14 08:00:24 2025 GMT
Not After : Jun 15 08:00:24 2025 GMT
Subject: CN=7ad584c5eb3f16f0ef4109dfb984f0c440b32c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:a4:9a:b0:7d:dd:62:e5:91:4d:42:cd:99:
e5:62:65:33:3f:04:c1:27:2e:c8:1c:70:48:8b:cb:
6c:77:d0:e7:48:29:32:0d:10:e4:55:33:e7:61:32:
65:6b:08:ca:fa:87:c4:b6:29:36:c8:af:c6:7b:93:
ad:34:8d:9f:5a:07:96:09:6c:58:c0:80:a2:23:1a:
be:02:67:2f:bd:33:0e:78:8d:1e:ea:ba:ce:1d:38:
8e:94:77:db:f0:50:5b:4f:26:53:58:4b:fd:f3:5a:
e4:f2:95:4f:35:98:ed:fb:68:f0:97:1b:81:22:b3:
4c:ab:e3:0c:2d:63:99:cc:73:0a:50:43:dd:ea:84:
17:e9:22:66:f1:b4:8a:b9:fc:4b:1a:c9:cc:3a:0f:
81:22:c5:66:a1:a5:55:43:b5:77:d9:11:1c:ea:ce:
8f:00:23:c6:da:48:d1:0c:dc:25:74:7e:5e:73:8d:
c6:80:60:ac:8e:d3:93:97:24:a2:2e:ca:28:0a:61:
dc:c6:e6:9e:1e:3e:d5:28:a8:39:b7:2f:b8:ee:94:
57:83:6b:49:68:3b:82:4e:1c:15:99:87:29:96:a2:
f8:db:93:cd:be:48:ab:f0:d8:ae:54:3b:da:03:6b:
58:68:f7:c0:63:f8:8e:f8:c6:88:e6:8a:e0:2c:f3:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:84:C5:EB:3F:16:F0:EF:41:09:DF:B9:84:F0:C4:40:B3:2C:8E
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:23:3b:89:5b:3e:62:27:24:6d:b7:a8:0d:b4:d9:c2:d3:
e3:1b:a5:85:00:f2:35:f9:7c:b7:7a:14:27:90:97:cc:ea:93:
71:9a:3f:a2:a8:c2:72:0e:bc:a4:ac:64:68:b6:4d:26:34:f9:
aa:a6:92:d5:96:1d:b8:c9:80:99:13:12:d0:60:e8:8a:7f:3b:
56:f6:b9:c9:1d:9a:ef:45:74:39:bc:b9:7a:dd:aa:a3:21:26:
66:45:b9:35:2e:9b:92:f7:6c:fc:d4:66:87:34:b5:cd:3e:5f:
08:1e:1a:9e:25:48:45:2b:ba:18:e0:89:94:17:71:88:84:d9:
c5:90:fb:d7:4a:17:40:8a:e3:d6:6f:24:4d:92:25:e5:e3:18:
5e:da:2a:b9:d0:2b:ef:1d:49:d8:70:05:92:d3:b1:7a:45:c1:
de:41:01:19:1f:aa:62:33:4b:03:0b:16:0e:74:df:c8:fa:93:
d5:97:cb:6c:fd:df:5c:ca:29:a3:4f:ac:74:fc:a4:15:80:df:
77:c8:cc:49:6d:c8:4f:e2:f6:e2:3b:1c:e4:23:5d:a6:e2:4b:
3a:c7:51:9a:07:01:d3:bb:76:c7:9e:31:d8:aa:f3:41:b4:15:
45:4d:66:cb:f7:a1:f7:f3:7a:83:ee:84:71:37:26:39:ca:ac:
c3:3a:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:48 2025 by rpki-client