Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: ZjIftyLoSi13VzHYwRKVveC8KR8G8K+ky6pmvJSczyk=
Subject key identifier: ED:56:96:29:32:20:DF:BD:EF:0B:60:B6:32:C8:12:90:26:A7:B1:E0
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 01976E5080E45990B6CCDE6882582E2C988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 12:00:58 +0000
Manifest this update: Sat 14 Jun 2025 12:00:58 +0000
Manifest next update: Sun 15 Jun 2025 12:00:58 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: yEUb7lak2ldHRs3Hy9aHQ2JsY8hm23Msx5fC/4sV6ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:80:e4:59:90:b6:cc:de:68:82:58:2e:2c:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jun 14 12:00:58 2025 GMT
Not After : Jun 15 12:00:58 2025 GMT
Subject: CN=ed5696293220dfbdef0b60b632c8129026a7b1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:3b:e0:a1:b7:95:58:92:77:a4:35:fc:df:
01:78:ae:63:89:7c:b6:a5:36:b4:c4:54:96:03:05:
bb:18:bc:a1:7c:86:ba:ac:d8:f2:e2:3d:aa:f8:a5:
67:6f:ad:e8:fc:bd:ac:28:56:b3:b9:c5:d7:dc:91:
b0:47:53:b1:1b:33:11:64:85:fe:ba:d6:e6:5f:8f:
d1:3c:3e:e4:d8:c3:5b:b8:78:59:2b:1f:5e:67:52:
63:6b:a2:88:40:cd:7f:a1:13:2b:26:c1:23:d6:1e:
a3:22:74:59:c8:e8:bf:ac:03:e6:49:63:89:ba:43:
ec:42:70:f3:d2:84:d9:3c:c7:0e:46:eb:3d:9f:e0:
b1:55:f2:f2:19:b7:14:ed:d9:48:14:eb:20:69:58:
86:76:8f:80:d4:8f:99:c6:50:bf:e7:6e:6d:1d:c1:
97:de:a6:ef:43:d3:1d:9b:eb:a8:73:87:96:49:1b:
77:10:6f:fb:c8:64:f8:c4:27:9b:1a:00:e1:27:86:
8f:ea:b4:8e:af:30:6f:3b:5d:d0:6f:2a:ff:fe:41:
8c:ad:4e:88:2d:22:e1:c9:08:7a:dc:b5:86:e4:4c:
d6:07:53:cf:65:b3:f6:0b:d5:83:9d:81:f4:35:34:
3c:09:67:a7:70:51:2a:7b:31:2e:fc:b6:02:1a:89:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:96:29:32:20:DF:BD:EF:0B:60:B6:32:C8:12:90:26:A7:B1:E0
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:5b:5e:59:fb:2e:c8:a7:49:2f:c5:7d:2e:d6:42:54:f7:
31:dd:dc:f5:ba:84:3c:69:75:86:37:1d:5d:53:24:04:65:49:
4f:86:10:8a:86:54:89:79:33:28:a0:c7:33:f0:6c:b7:71:85:
8e:4b:d0:2f:77:6b:97:c8:a0:48:24:ad:bf:c2:f2:01:9b:42:
e4:be:a3:04:86:a5:c7:45:a3:61:0d:5f:0c:9e:33:f1:55:3a:
d7:c4:e8:f7:9e:e9:69:3f:19:61:da:03:b9:eb:94:57:b3:42:
6c:91:83:a5:b4:5d:08:a4:5c:d8:16:f2:31:4f:8e:29:7a:f5:
9b:1e:c3:4d:bd:bc:12:e2:fa:5b:4c:c2:c0:f8:4d:38:01:86:
22:98:86:db:22:7c:20:1b:4c:52:00:4b:f6:da:83:be:2c:24:
8d:e1:04:96:48:96:c8:34:9b:e1:d7:36:01:db:0d:bd:38:11:
95:86:00:02:17:a7:fa:17:9c:e6:9f:24:f0:b9:ea:2d:ff:34:
40:de:66:cb:18:40:aa:79:1c:71:93:b8:f4:4e:87:24:3b:a9:
93:2c:02:4b:d3:dc:33:df:ee:d1:66:74:91:22:57:2e:9f:0a:
8f:76:2e:e4:a6:51:0b:3e:2c:38:67:4f:3c:e7:7c:ac:d7:a3:
8c:e5:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:53 2025 by rpki-client