Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: WuGGdqjRaTZDr589eSjgzPi1NLwlSjqG7zeRm25RIBM=
Subject key identifier: A7:5A:3A:25:2A:DC:0E:D4:73:81:27:A2:54:9B:31:38:C0:B3:B7:33
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01976C2B12AB722BC8B68136B71DD10CB1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:00:51 +0000
Manifest this update: Sat 14 Jun 2025 02:00:51 +0000
Manifest next update: Sun 15 Jun 2025 02:00:51 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: 4vMNLoxg9mHurvLmQGRQO2RtLdOXDr8HJMQfnxYP8M4=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:12:ab:72:2b:c8:b6:81:36:b7:1d:d1:0c:b1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jun 14 02:00:51 2025 GMT
Not After : Jun 15 02:00:51 2025 GMT
Subject: CN=a75a3a252adc0ed4738127a2549b3138c0b3b733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:9a:bb:15:76:b3:11:00:37:2d:74:b7:10:
2f:a1:f9:0b:96:da:68:d4:a9:a1:75:1b:be:95:0d:
83:c9:f4:56:69:75:47:53:09:75:d2:3a:ee:81:6f:
97:2f:c5:71:6b:c2:8e:66:5f:e6:94:5f:78:96:0a:
10:c5:1b:72:92:00:da:b9:f2:92:81:a6:12:7d:ba:
82:25:ad:39:99:41:ec:de:3c:f9:f7:8c:cb:81:f7:
22:ba:e9:0b:9b:14:f7:da:d7:73:0b:34:9c:60:73:
32:f9:9f:d8:4f:96:12:0c:44:fb:10:e3:fd:5e:26:
97:bb:49:18:4b:d7:64:bb:41:4f:77:87:99:6f:f6:
a9:4a:09:c2:82:4a:cc:0d:7f:7f:e5:a4:eb:59:fe:
57:1c:7f:5f:85:23:79:37:f1:16:c5:64:5d:5b:ee:
84:dd:c0:aa:39:ed:dc:40:61:7b:a1:ae:7b:1c:08:
43:79:57:26:6d:b8:c9:8f:d0:75:e5:37:b8:62:58:
9e:12:be:51:e4:67:5c:73:46:a3:8f:56:d9:43:38:
9b:28:df:b5:23:48:3f:c1:ac:3e:76:d9:ec:2b:06:
47:8f:9c:f7:ab:6a:8c:4b:f8:d5:da:bc:cb:dd:3b:
42:bb:9f:70:55:eb:4c:84:c8:29:23:60:69:25:45:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:3A:25:2A:DC:0E:D4:73:81:27:A2:54:9B:31:38:C0:B3:B7:33
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b5:c3:97:8c:d8:4f:38:5e:f8:c3:56:4e:dd:ee:a8:7c:08:
77:b1:05:e1:cb:e6:a5:eb:ef:06:02:59:f8:62:0d:b0:60:6a:
a1:8a:35:ea:4f:fd:01:a0:7d:86:53:f0:25:fc:72:f7:3c:f1:
eb:c3:34:f8:f4:4b:ed:11:8c:82:d5:38:bf:5b:80:27:1c:d9:
dd:e1:3d:b5:06:5e:dc:f5:58:0f:a5:3e:be:bb:c7:81:2a:f5:
db:a5:55:e4:a4:f7:01:21:e5:97:d1:ee:b8:9e:35:e1:5d:46:
5c:dd:0c:07:2a:af:97:15:66:04:57:e1:19:d5:df:aa:40:53:
9b:79:0c:ea:8f:b7:99:72:df:f5:98:83:43:5c:99:42:5b:64:
eb:45:89:34:7a:1e:a6:e7:dc:a8:8e:75:95:9f:11:79:e8:13:
46:fa:1a:54:42:7e:09:60:58:f2:7d:02:70:9c:36:4c:e4:61:
83:a4:94:e3:cd:be:9f:a0:3d:68:b8:64:a9:d6:84:98:04:34:
b5:81:05:83:53:7b:0b:13:b8:63:82:43:e4:a0:7e:a0:89:38:
38:e0:96:dc:ee:10:60:1c:92:16:51:df:cd:08:37:e0:1b:9f:
af:11:87:b3:ec:02:fb:e2:18:68:a5:31:1a:8c:ec:35:08:68:
0a:01:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:59 2025 by rpki-client