Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: QKQdhAw9r1FKMnIzJfzJOWv87iWpmM0/g0XGyRzaXLY=
Subject key identifier: 54:9A:9C:B6:68:0E:3F:C4:76:04:7C:98:F9:01:BA:A6:71:D7:F4:AC
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01978990D2E4E7F2949DBA0A209330E8F3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 10D3
Signing time: Thu 19 Jun 2025 19:00:59 +0000
Manifest this update: Thu 19 Jun 2025 19:00:59 +0000
Manifest next update: Fri 20 Jun 2025 19:00:59 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: USr6nokHAEF6rnDp5nSQ2ROq3a8WO2WwUe7nxyl/mO0=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:90:d2:e4:e7:f2:94:9d:ba:0a:20:93:30:e8:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jun 19 19:00:59 2025 GMT
Not After : Jun 20 19:00:59 2025 GMT
Subject: CN=549a9cb6680e3fc476047c98f901baa671d7f4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:64:05:64:14:e5:ae:37:06:79:8a:ba:fe:
97:45:78:fc:44:3e:92:2d:e2:39:c8:79:82:dd:16:
6b:61:91:2e:52:fd:3f:4e:35:ca:9b:39:98:ea:7d:
c3:bc:83:d8:00:21:74:df:10:40:59:18:99:46:4f:
bf:08:f8:79:81:73:2b:f9:e4:44:04:17:dc:b0:0e:
31:14:b2:ef:f0:77:96:6b:88:63:0d:5b:cf:26:68:
94:cb:a0:61:8d:b5:01:e4:4d:69:b2:d9:92:8a:07:
6d:22:c1:0a:0b:d2:b0:25:a6:5d:d9:93:25:c2:61:
ac:24:a3:38:81:96:ee:02:77:f7:15:8a:61:d3:53:
8d:ca:81:f4:8d:4c:ec:90:8b:eb:24:58:24:7c:22:
0c:10:46:8c:0e:2b:e5:4e:dd:c1:73:7d:02:d2:6f:
60:98:be:9b:75:a0:4b:d2:5f:7e:57:fa:59:de:c9:
53:78:23:e9:28:86:64:87:13:3a:bb:e8:cf:e1:19:
43:30:bd:93:6a:37:e0:96:3e:37:9a:a2:68:b4:af:
bb:f3:5f:4f:c8:e1:02:dd:48:52:88:a5:b5:67:f5:
c3:d7:ad:ae:4b:4e:0d:eb:f4:58:49:3a:7d:c4:9a:
e6:2d:b0:e8:bf:3c:31:ed:21:e6:ac:6c:ef:19:e1:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:9C:B6:68:0E:3F:C4:76:04:7C:98:F9:01:BA:A6:71:D7:F4:AC
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:33:17:28:b8:d7:43:44:15:40:42:58:59:47:26:36:25:c6:
2c:17:75:22:96:36:23:5b:12:92:37:04:4d:ad:f8:15:5b:69:
5e:e6:63:86:8a:12:c2:55:7d:95:35:fa:11:4f:41:4a:38:a4:
3e:c3:a4:bf:ad:07:2c:19:29:73:ad:ca:14:c9:bc:d9:1b:03:
c0:4e:73:f3:a8:80:f1:1a:45:48:09:c6:ef:0e:65:c3:a2:d3:
ad:cc:96:00:82:c3:78:99:f7:a3:2f:ef:c4:28:53:02:57:77:
2d:db:de:f0:e3:43:9f:4f:63:67:50:71:d1:0a:af:a9:2a:4b:
d7:17:b1:b7:1b:2e:c5:80:1c:78:63:26:0e:2d:d2:19:1f:b6:
dc:bc:f5:01:9d:86:7b:40:1c:00:26:5d:be:4a:65:1f:98:fe:
ed:ba:1b:67:3e:f4:10:08:bf:58:45:a6:e1:d3:50:5b:c7:86:
64:46:a1:47:1b:26:ca:24:ed:52:1e:f3:f4:45:77:f9:4b:3c:
01:6c:c3:9f:3c:d0:02:64:79:ef:c1:26:f3:37:88:27:7e:e1:
d4:aa:8b:23:49:6c:48:d9:60:8a:5b:38:50:cc:ce:6a:2e:b7:
9a:61:68:14:50:e3:21:7f:32:c4:e4:69:f7:ba:fc:89:d5:1b:
5f:ab:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:32:21 2025 by rpki-client