Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: W68odfWLqTnV+WrxkzdHkm1sGK/22hW3U68sO5iezx4=
Subject key identifier: CF:83:AB:1C:38:28:8C:EB:BD:6A:09:99:04:0C:B3:E6:36:67:0C:9B
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01976F9A41F4ED66890EEAD32434E156D4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0382
Signing time: Sat 14 Jun 2025 18:01:09 +0000
Manifest this update: Sat 14 Jun 2025 18:01:09 +0000
Manifest next update: Sun 15 Jun 2025 18:01:09 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: CftGCbhdpIBnB60Job+LOAeRywEagNzezyqUkcTBUZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:41:f4:ed:66:89:0e:ea:d3:24:34:e1:56:d4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jun 14 18:01:09 2025 GMT
Not After : Jun 15 18:01:09 2025 GMT
Subject: CN=cf83ab1c38288cebbd6a0999040cb3e636670c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:73:d1:1b:6a:c3:15:fe:87:5c:d9:9f:ad:
b4:fb:81:3f:18:a4:0a:14:8e:8b:26:99:a2:58:45:
69:27:a3:e3:16:0a:cb:0c:9e:9f:5a:70:a9:d6:c7:
12:80:5d:70:83:33:0a:0a:78:5c:33:19:0b:85:7d:
80:f0:4e:0d:67:27:c0:b4:4e:b9:79:c2:cf:fc:e4:
93:8b:ae:2c:45:9a:4b:d8:b5:d2:5f:41:90:41:fa:
bd:b9:99:d6:9f:82:15:f1:60:b5:8f:5f:ff:e0:6d:
7c:66:65:c2:a5:7d:c0:d5:9a:22:3e:09:a7:df:ce:
0c:cb:3d:ce:d7:29:9f:a6:e9:44:3e:eb:71:b7:a6:
e9:6a:ff:dc:d1:20:73:41:2d:81:66:d6:a4:29:de:
e6:ca:30:61:7a:09:f1:f2:84:3c:62:3a:85:5d:76:
6f:1e:e7:fd:e6:5f:e8:df:96:2f:8a:b5:8c:4b:ad:
c2:f3:3b:21:9f:0c:28:f9:19:14:2e:97:3b:1d:bb:
b5:86:a7:1b:67:a6:12:2b:68:35:b0:53:55:9b:42:
08:89:a3:d8:a6:ef:b1:04:98:8f:a8:86:18:6b:c7:
b4:e3:70:56:93:2a:43:f5:0b:80:f2:f0:f1:87:e3:
72:05:73:84:68:cc:96:08:e3:00:3b:e7:83:b3:26:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:AB:1C:38:28:8C:EB:BD:6A:09:99:04:0C:B3:E6:36:67:0C:9B
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:2f:65:a0:d8:ba:74:39:e2:cc:92:e9:b5:54:aa:b7:33:
f7:9e:45:60:4f:9f:18:0a:0f:94:ef:3f:ee:8f:ac:bb:5d:f7:
3c:d5:bf:89:df:a1:93:2a:ac:99:37:de:e5:ae:1d:de:9c:c2:
31:45:19:29:db:6a:c5:d4:d8:60:7e:ce:83:67:09:19:f2:3c:
af:3b:ed:49:c3:1a:73:b9:b2:df:0a:6b:4d:ad:0f:da:11:8f:
b1:77:0b:58:34:f9:fa:27:8e:9f:87:03:57:02:1d:c5:dc:24:
48:78:4a:28:8d:dd:27:5a:eb:bf:86:75:cc:db:49:02:53:4c:
d5:e1:e9:67:8c:58:02:75:d7:df:48:82:21:df:47:e3:13:7a:
45:46:e5:b3:b5:28:52:09:19:ff:22:d9:76:a8:e2:b3:2b:da:
85:4b:13:79:f9:b5:c2:6c:ad:35:29:04:56:1f:12:42:c9:d5:
b8:f1:fe:54:d8:a2:02:2d:4c:da:05:7f:5d:28:a7:e8:c0:87:
d5:39:4f:ee:26:d9:46:8c:46:9a:78:ca:dd:81:07:cf:0c:67:
bf:c3:7b:19:cb:c5:0f:84:48:cb:f8:0c:2c:33:1d:c2:de:84:
9b:af:7b:7d:04:f7:a6:86:45:b9:d0:42:dc:0d:1f:2a:5c:3a:
1d:36:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:07:08 2025 by rpki-client