Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: sD9HnQ20EnnO/CvefsYWwkVTL5BxS/hM06EHXVjm9dk=
Subject key identifier: 73:FE:E0:B1:F3:4D:D2:16:48:BA:F1:B8:2E:96:79:FB:79:0C:6C:10
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01977A1DA2B34A05A71F8C95C5ACFEB0E29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 027D
Signing time: Mon 16 Jun 2025 19:00:51 +0000
Manifest this update: Mon 16 Jun 2025 19:00:51 +0000
Manifest next update: Tue 17 Jun 2025 19:00:51 +0000
Files and hashes: 1: P7g82oQa9maLUZf-zyJXFEwQ_Tk.roa (hash: R1Jxxc/Qby3IEt4xnho0adyCsC1rCUaoaz24WlyrPXE=)
2: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: XoOTsxAjCcEsnwUkBU7Vz7fdj/VN4dkdIRsaLJbg1GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:a2:b3:4a:05:a7:1f:8c:95:c5:ac:fe:b0:e2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Jun 16 19:00:51 2025 GMT
Not After : Jun 17 19:00:51 2025 GMT
Subject: CN=73fee0b1f34dd21648baf1b82e9679fb790c6c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:5a:54:93:bd:f5:41:3f:5f:92:c8:7c:22:
9b:04:67:c6:a7:8d:d8:fc:98:01:6a:f8:80:21:86:
f8:66:8b:1b:9d:62:23:94:70:32:1f:c3:56:2a:3e:
69:6e:47:a9:c4:48:3a:10:ff:c0:b6:b5:d9:0b:d8:
5c:7d:a1:d9:b2:59:aa:67:bb:1e:e3:ca:e2:ac:66:
b9:f6:6d:7e:b7:f8:5e:36:35:a6:43:b0:78:2f:bb:
fb:56:3c:c2:79:04:f7:95:3c:b6:a0:9b:55:96:57:
f8:af:6b:ba:be:ce:b8:b4:9a:8e:b1:f5:d0:5f:32:
ab:16:0c:cc:38:6c:a0:8f:f4:2b:d7:a6:a3:45:e6:
81:a1:78:a0:27:d4:98:88:ed:7d:04:ba:ef:64:86:
cf:05:78:6a:44:3e:30:07:ad:df:06:ff:3f:b7:96:
df:36:cb:f1:03:96:09:48:d7:91:e6:12:04:d0:3c:
05:05:c3:ec:bc:86:da:ce:00:e1:2a:e8:c3:09:8a:
02:c2:45:f1:d8:b2:8c:32:e2:5f:9d:99:ca:cf:62:
48:bf:5e:96:7c:bd:67:a2:ed:8b:3b:d0:6a:bc:27:
27:9d:34:98:c9:66:12:51:4e:f1:0d:f6:63:1c:3a:
61:5a:f9:d3:c7:13:54:4f:3b:d1:ab:a3:31:e3:09:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:E0:B1:F3:4D:D2:16:48:BA:F1:B8:2E:96:79:FB:79:0C:6C:10
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:b5:13:67:6e:7e:2a:90:25:3c:d1:7d:93:54:0a:95:1f:
b9:d3:e8:1e:4b:99:0e:c0:06:fa:6b:8a:50:1f:56:be:58:b2:
62:15:cd:7a:00:7a:98:7e:b8:af:e8:5d:b4:cb:2b:5a:b9:f0:
e7:11:9c:b8:39:cf:fb:74:f0:cf:14:a8:2e:c2:0b:f3:8e:22:
fa:56:90:ff:8b:3d:3f:4a:dd:9b:71:1a:50:b3:10:39:55:59:
53:84:da:8e:42:63:0c:9f:f0:fe:c0:07:c6:91:4e:23:c0:1c:
ab:eb:e2:cd:6e:fc:1f:25:73:c5:0f:02:a6:28:d6:43:c7:d3:
4c:28:e4:cd:94:2c:e6:8d:34:c1:c7:59:2f:de:75:2d:d0:a0:
aa:5e:52:d2:79:84:0c:6f:95:6e:88:45:c3:d3:54:a3:2f:f3:
51:83:31:81:dd:4d:69:34:a3:c5:fd:cf:05:b5:58:59:da:ea:
28:aa:fc:a2:75:74:56:0b:fa:2d:b0:76:78:c8:b7:67:a2:51:
f2:fc:00:b3:b0:b3:17:87:bc:a0:cb:d1:05:34:8c:9a:9d:cb:
f6:06:ff:9a:45:5c:d2:18:b1:47:da:75:b0:fa:2c:ab:20:f9:
f6:92:19:b7:98:69:74:e4:37:a8:45:32:16:5d:0d:c1:18:37:
87:25:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:08 2025 by rpki-client