Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: NpQ1ecc1hcbRlRYBLKykqXBWZnB/0k/7MqRFOuccMHw=
Subject key identifier: 3F:CF:3D:F1:42:32:1F:C7:85:84:38:96:B4:E1:87:81:B5:AA:BC:49
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 01976D7489D1B6C32D5D074FB4B8973A3BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1480
Signing time: Sat 14 Jun 2025 08:00:43 +0000
Manifest this update: Sat 14 Jun 2025 08:00:43 +0000
Manifest next update: Sun 15 Jun 2025 08:00:43 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: I6CS3nWQPomTlXhhRFX4MOLI1OpsYMbPPmuqEaEcVL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:89:d1:b6:c3:2d:5d:07:4f:b4:b8:97:3a:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Jun 14 08:00:43 2025 GMT
Not After : Jun 15 08:00:43 2025 GMT
Subject: CN=3fcf3df142321fc785843896b4e18781b5aabc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:35:64:38:27:ed:ee:ab:2a:c5:7b:57:d8:
f8:94:a3:f0:36:58:65:f1:a6:4c:fc:47:8a:c8:39:
63:20:8a:2f:b4:11:80:ce:30:a8:d0:6b:83:b0:c1:
22:63:97:46:02:3c:c5:78:c5:43:c9:b8:a2:0a:8d:
b2:a6:7e:8b:55:b0:04:01:e2:90:fe:9b:a5:0a:1a:
77:58:cc:8a:71:4d:95:2a:96:a2:d8:ba:b9:60:28:
75:5e:6a:60:83:c6:8a:34:a6:89:f0:20:b0:51:c8:
b1:8d:47:d5:56:1e:8c:0d:ec:52:b8:50:06:25:bc:
cf:f6:3b:b6:b5:65:29:f0:01:8a:1d:a1:37:fb:36:
b8:90:77:11:2b:60:84:7a:99:5a:38:10:53:2b:61:
eb:b1:41:06:27:99:40:5c:82:44:9d:e1:4a:58:58:
a1:6b:f0:d3:7e:f6:c3:98:fb:4b:77:a1:13:a2:e7:
68:4e:22:a3:9a:3f:f1:54:d1:b4:14:59:45:38:4d:
88:af:11:d8:8c:0e:51:5b:24:20:0d:17:30:82:90:
3e:cc:a9:82:02:01:a6:6a:89:31:9d:5e:b9:70:28:
00:6c:ca:85:4e:4a:70:b8:65:2e:9e:28:5f:40:c5:
e0:1a:dc:f4:3a:9e:4f:65:25:27:5c:45:18:99:5e:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:3D:F1:42:32:1F:C7:85:84:38:96:B4:E1:87:81:B5:AA:BC:49
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:91:77:aa:64:25:0f:82:2f:ca:a0:8f:20:b3:f2:f6:4e:
e1:d7:e7:1b:12:07:31:02:df:a5:2f:cd:89:2d:a3:8d:f6:8f:
45:21:c5:b0:8d:06:53:d5:ab:90:0e:2b:ed:53:ec:88:1e:e3:
39:0e:13:5b:d7:c8:c0:28:bc:d9:e6:a4:a5:6a:59:25:db:39:
d6:3a:4d:15:dc:a9:2f:ba:0a:43:b0:8b:88:6b:58:c5:d8:ee:
0d:06:f9:7d:c8:ca:4f:13:25:c7:d3:ee:12:7b:ce:d9:c3:af:
5b:c8:49:e9:fa:1d:8b:aa:96:c0:62:cc:52:f1:08:15:02:08:
2d:4f:b0:05:af:23:0d:27:c5:44:f9:26:7d:a5:33:e1:e0:da:
ce:7b:ed:c4:4d:ec:6d:d0:1f:72:57:8b:fa:06:c0:55:95:8f:
a8:39:19:39:1f:88:e2:ef:21:c8:5b:b2:9a:dc:f6:5f:e0:ac:
d7:70:86:aa:67:0e:50:5a:65:97:3e:6d:92:64:e1:a9:eb:da:
be:91:68:6d:99:02:7c:92:d1:6c:ee:44:a5:fe:62:3d:42:fe:
66:2d:77:ed:af:e5:dd:1c:da:ca:dd:19:1e:3a:00:d4:36:a7:
c7:76:60:51:7f:37:88:19:c8:e1:70:25:77:7b:f5:fc:f6:c7:
89:ec:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:04 2025 by rpki-client