Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: qo4fepwrkYsLdxN1gRmLP1y15Runircp+TjLWtfymYA=
Subject key identifier: 3B:E6:DA:74:83:09:5D:BC:D7:39:36:EE:13:C7:8A:73:BF:81:14:4E
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01977978D16F02C1DC98CB33A77D33A37E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 12A6
Signing time: Mon 16 Jun 2025 16:00:50 +0000
Manifest this update: Mon 16 Jun 2025 16:00:50 +0000
Manifest next update: Tue 17 Jun 2025 16:00:50 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: HnoG40FM8HwvxHRs8L7LeZPxTe3Sp0oMs8ed3VKgSkE=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:d1:6f:02:c1:dc:98:cb:33:a7:7d:33:a3:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jun 16 16:00:50 2025 GMT
Not After : Jun 17 16:00:50 2025 GMT
Subject: CN=3be6da7483095dbcd73936ee13c78a73bf81144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:05:a7:76:b4:df:3f:7c:b0:44:83:fb:cd:
8d:a0:0d:a0:ec:56:70:f5:39:b0:2a:0c:b9:1b:a4:
ee:b4:6d:c9:63:5b:de:44:c6:d9:85:e9:9b:8d:9d:
bd:3d:b7:a6:a8:9f:bd:5c:75:65:ce:c2:cc:35:78:
3c:c3:16:00:1b:22:f8:e5:8f:77:a3:7c:bc:6d:66:
b1:f4:7a:fc:bc:07:ae:89:3e:99:ff:21:71:3d:3e:
bc:75:12:e1:ca:d9:2a:45:ee:0a:89:0f:34:15:91:
73:27:0f:5d:65:26:cb:f6:cd:bd:79:db:8f:2b:ad:
b7:ab:7b:d9:18:80:71:7a:a9:39:65:12:5d:d9:22:
3f:77:c5:c9:b6:78:b8:1c:5f:56:e0:95:7e:55:58:
b4:e7:07:99:5a:8b:9b:51:62:8d:73:db:dc:c8:ac:
9e:bf:b0:a9:54:53:88:63:1f:4b:39:81:ab:5b:22:
55:9b:b1:a8:d3:e7:69:d9:8d:ad:8f:72:9d:b5:b9:
16:26:3b:e6:7d:c3:b8:b6:d4:1e:e0:8f:1a:d6:22:
eb:b8:96:20:96:07:3d:bb:d2:af:f5:fc:9c:83:46:
91:78:d7:1e:a2:6f:e4:f9:0b:bf:ec:a4:6b:f8:d0:
a0:a5:91:65:16:b7:f6:2e:4f:b6:20:a0:f9:2c:f4:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:DA:74:83:09:5D:BC:D7:39:36:EE:13:C7:8A:73:BF:81:14:4E
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:0f:dd:47:c1:45:4d:c8:ff:bf:56:56:37:9a:c4:d7:98:
e9:93:03:88:f8:f7:20:4a:34:28:17:7b:28:8b:01:0f:fb:e7:
a7:72:a1:63:68:1b:05:18:49:fc:08:91:c6:a1:97:bc:23:22:
76:83:70:24:1f:e9:ef:23:41:cb:6a:07:86:5f:73:80:2d:bd:
03:5b:84:ca:24:03:0b:49:f7:67:f8:ff:3c:a4:8b:fd:19:1b:
05:0e:60:aa:ba:08:0b:32:07:c6:2a:76:76:5a:a0:84:28:3f:
07:e2:47:e6:5c:e6:23:cf:1f:7e:d7:2d:88:a9:ce:82:7a:9a:
c1:f3:b3:fd:f9:8d:91:49:88:c1:fc:03:31:a0:27:b0:a4:38:
c2:f6:22:3a:46:b2:bf:d1:2d:ba:c9:ee:b2:d4:f3:8a:77:d4:
e3:0d:e5:8c:31:8f:7e:c1:d7:f8:37:80:f4:a6:45:bb:75:70:
98:eb:c1:f1:51:ff:5d:a3:e0:3c:a4:29:56:78:78:d9:bd:1b:
1c:2e:76:1a:b6:2e:6f:cd:2c:b9:4a:8e:90:7e:fb:8b:d5:b2:
d7:69:71:de:f1:d5:e2:5a:d8:c6:44:b0:d6:4a:31:d2:83:bf:
50:d7:e6:68:e7:69:6a:01:1b:c6:87:4a:47:1e:8d:69:e4:eb:
c3:38:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:43:43 2025 by rpki-client