Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: eMJs1ROJQz1bgkPRc8lB1iKF/4TVqRK2wkkjxxN78WU=
Subject key identifier: 24:64:BF:AF:7B:93:03:44:D3:DB:B1:A0:D8:EE:43:D9:FA:1E:99:77
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01976D06BCD8D569BCD99F653B67579CAAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:47 +0000
Manifest this update: Sat 14 Jun 2025 06:00:47 +0000
Manifest next update: Sun 15 Jun 2025 06:00:47 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: vnvo3qmTVeFbc4PUX6B3SPx1/Parc/7Zh08x4YHg2SI=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:bc:d8:d5:69:bc:d9:9f:65:3b:67:57:9c:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jun 14 06:00:47 2025 GMT
Not After : Jun 15 06:00:47 2025 GMT
Subject: CN=2464bfaf7b930344d3dbb1a0d8ee43d9fa1e9977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:1b:46:2c:26:8c:5c:08:c6:bd:b1:44:98:
94:bd:14:44:fa:72:30:11:99:0c:26:84:fe:e3:52:
95:c1:7f:39:2d:ee:e8:86:29:c2:43:cd:61:30:d0:
c1:a9:c2:b6:95:ab:6d:5a:d5:aa:9c:48:1f:c0:51:
70:a6:ab:9a:3a:b4:d0:38:5f:16:5b:c3:88:95:6b:
b2:bb:92:f3:11:4a:66:63:ce:94:7d:f4:eb:01:e7:
0e:96:27:62:d3:84:de:d6:4a:10:ba:27:03:74:de:
2b:02:72:05:f9:90:a3:c8:bb:41:4b:07:c1:bc:71:
df:86:df:be:22:9a:b3:ef:9f:30:af:de:53:0d:53:
43:8d:3a:c3:7a:6f:87:3d:bf:fd:d9:5a:26:14:82:
41:50:30:e4:87:a0:9b:84:2d:cb:26:65:a0:c0:de:
7c:39:fd:a6:c9:38:c9:24:1e:fc:e3:43:fe:59:3a:
e9:a1:06:2d:c1:5c:e2:4b:6f:d1:86:fa:02:ab:30:
8a:b0:75:53:44:33:19:4e:57:07:c1:d3:47:29:11:
f6:fb:bb:38:26:b0:86:44:28:3e:67:b0:ed:ba:18:
08:ea:28:f8:e4:36:e5:6b:2a:fa:1f:1f:95:bd:02:
f8:58:64:7b:60:e6:d6:eb:30:d6:07:fd:fe:0b:ed:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:BF:AF:7B:93:03:44:D3:DB:B1:A0:D8:EE:43:D9:FA:1E:99:77
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:c3:8b:20:25:d9:63:ff:af:1f:38:de:9e:f9:da:2d:62:
f2:01:60:b4:83:07:5b:76:76:93:cf:bf:61:f5:6f:cb:24:8d:
30:81:17:3f:a4:05:cd:84:89:64:93:f5:f0:de:c9:0f:e1:d6:
bc:54:42:54:35:cc:2a:ba:99:f8:0b:3d:ce:a9:7e:ce:50:5c:
56:ba:4c:75:66:05:17:cd:30:33:b1:d0:7d:f5:48:ab:0e:ce:
43:46:44:43:ad:1b:81:4e:8f:3f:c2:b5:36:43:29:bf:26:60:
48:5e:63:54:2d:84:06:f1:7c:05:cb:ab:2c:86:7f:e5:ab:03:
d4:2e:c4:23:67:72:49:c8:25:03:ef:62:7b:3d:d3:e9:b5:1a:
be:52:08:6b:c8:cd:f2:51:8d:e9:cc:2a:23:25:f3:a4:2e:0f:
ae:9c:7d:b4:bb:03:39:82:70:e8:64:87:28:d1:26:e8:51:1b:
27:67:80:24:70:dd:07:f3:15:ac:b7:71:20:7d:39:b2:d6:48:
44:c5:d1:6c:ad:2d:21:9b:72:f8:c5:1a:4d:a0:8f:fd:61:91:
f2:7b:73:5c:bc:7f:a9:3f:b3:c8:dd:1e:aa:8d:ce:0a:a9:ca:
75:1f:76:5e:be:30:14:df:97:97:81:7a:38:f6:5d:c2:f1:df:
80:a6:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:19 2025 by rpki-client