Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: zWy3/A1YO83SKhKV+2JGztGB/j8D6FnZloW4Eaq4XcI=
Subject key identifier: D2:C0:64:87:11:EF:93:CF:CB:EA:40:CF:80:93:F7:17:FF:9A:E5:85
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0197722D212FC602DFDFFF725525C8506BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1402
Signing time: Sun 15 Jun 2025 06:00:49 +0000
Manifest this update: Sun 15 Jun 2025 06:00:49 +0000
Manifest next update: Mon 16 Jun 2025 06:00:49 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: wjP7vJGmmRcaww1K59SmV8q0pp06nMuzOXSuHkJUios=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:21:2f:c6:02:df:df:ff:72:55:25:c8:50:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jun 15 06:00:49 2025 GMT
Not After : Jun 16 06:00:49 2025 GMT
Subject: CN=d2c0648711ef93cfcbea40cf8093f717ff9ae585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:1a:3f:a9:6f:f0:46:86:f1:17:d7:a5:dc:
ab:75:7f:a5:42:f2:8e:bd:de:e8:0c:9f:fc:1a:ed:
20:10:f9:47:7c:1a:00:de:54:c7:f3:63:62:98:40:
80:a7:7c:52:ec:90:5b:4d:8d:9f:a4:6d:07:0b:6b:
58:43:f7:0d:6a:ac:6c:99:24:dc:06:88:f4:ae:d1:
d1:75:9e:42:2e:4e:7a:f9:24:4c:57:d6:c2:3f:27:
c9:25:f2:ef:9e:26:f1:11:ef:3c:55:9f:08:74:4e:
14:cb:15:62:e8:e4:6a:c5:ec:e2:d7:ae:b6:04:60:
92:13:e7:1b:70:af:a8:6b:58:5f:69:ed:6a:44:ae:
d8:c0:8c:7f:7a:d5:dc:c4:05:32:5f:b3:80:39:d7:
4e:5f:08:2e:d0:ee:92:4f:cc:9b:3f:7e:20:5a:31:
8b:be:a2:2b:96:34:a3:9d:23:a1:15:46:d4:7f:23:
e7:06:77:ed:71:1c:8c:d3:35:01:0a:fa:c1:43:f7:
63:fa:55:07:16:9d:b0:c7:6b:52:99:32:39:66:ad:
85:f9:0a:b4:a6:a6:e2:30:d0:c6:77:99:2f:d6:d6:
35:f1:7e:be:60:9f:4e:34:6d:5c:f2:45:c0:0b:26:
4c:90:2e:5f:df:64:36:48:24:e2:f3:6e:5e:7e:5e:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:64:87:11:EF:93:CF:CB:EA:40:CF:80:93:F7:17:FF:9A:E5:85
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:30:5b:4e:c8:b8:85:8b:56:fd:43:e1:ef:55:a6:72:0b:02:
10:53:88:45:33:fd:dd:cd:69:38:46:aa:3b:13:36:74:e1:25:
a6:36:08:88:99:6a:5c:f9:da:9b:89:ec:33:b9:ad:b8:a1:30:
1d:4b:3f:fb:c6:36:4d:1d:c1:b2:a9:76:e9:47:10:c2:b3:83:
49:59:41:e1:d2:6a:16:0e:3f:1f:4f:d1:bd:f1:c4:5e:53:bb:
06:39:a6:dc:bb:27:ef:ba:43:42:5a:8d:23:25:bc:97:c0:6c:
ed:dd:70:af:98:e7:7a:fc:2d:97:4a:b7:19:af:0a:f2:83:ff:
7e:78:53:74:93:59:8a:13:80:cf:1a:e3:97:a4:0e:f4:ef:d7:
04:72:aa:17:a5:8a:3d:c2:46:95:8f:2e:f9:14:d4:b5:ae:98:
45:88:23:7c:e8:37:d0:b5:7e:f7:7e:2a:c3:be:65:b8:a6:84:
ec:4e:9e:8c:73:a9:66:cd:05:e0:4d:56:44:b9:c4:f0:b9:2b:
0c:b8:0a:bf:4e:bd:f9:0e:55:4c:75:80:5c:33:2b:10:d2:24:
ce:09:84:31:5a:41:a8:70:58:cd:29:b6:46:84:cb:d0:c4:9b:
31:d7:e2:70:35:f9:57:37:ca:44:24:7a:01:c2:3a:cf:58:f9:
bd:2f:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:06 2025 by rpki-client