Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: Z1LcmPOwSGeLMn75nLetXLL8w91pdbkIZHtnrP+St+Y=
Subject key identifier: BC:97:BE:9C:90:F7:FA:11:8F:DA:50:11:DE:09:8E:2A:AF:BB:AC:42
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01976C2AE22969E5E2619156B0CD37E3ACC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 02:00:39 +0000
Manifest this update: Sat 14 Jun 2025 02:00:39 +0000
Manifest next update: Sun 15 Jun 2025 02:00:39 +0000
Files and hashes: 1: 60je5SoeoIIvExp08AfHAba81Gg.roa (hash: OYL+m6W/OD3kcGFXK2Ewor0X0LhaICB75RQGsXvyc9g=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: 7RoLPXea4fxSBmQT69mU++eexTKKaqwJPLhw/QV6NVA=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:e2:29:69:e5:e2:61:91:56:b0:cd:37:e3:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jun 14 02:00:39 2025 GMT
Not After : Jun 15 02:00:39 2025 GMT
Subject: CN=bc97be9c90f7fa118fda5011de098e2aafbbac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:b2:35:b0:c9:93:f1:57:b0:a7:9d:17:ec:
0e:85:28:5f:b1:97:1f:a3:f5:c4:87:61:6f:6c:6b:
29:e1:43:b2:c4:0e:aa:74:d3:3e:44:fd:59:5e:8a:
b5:41:9c:54:75:e9:60:4d:e8:56:81:84:7e:2f:92:
95:ec:a1:cf:75:de:cb:c4:32:68:8d:e1:cf:e6:60:
ae:8d:68:6c:30:af:9b:33:34:ce:f2:ee:ac:4a:54:
f9:a5:a7:05:63:5d:a1:7c:3a:49:ac:31:f1:c2:c7:
a0:b1:38:28:bc:c1:50:f2:86:e7:d9:9b:09:7f:9e:
1b:8e:b6:49:6c:01:66:eb:55:09:80:81:e0:a6:67:
24:55:5d:90:1a:de:a1:e8:af:52:66:2a:f9:c6:86:
ba:bc:30:a6:d8:cd:9b:fb:47:ad:7a:9a:01:93:8b:
bb:29:3e:17:ee:5f:9e:e4:fe:ec:ff:03:63:a5:e3:
93:5c:5d:c8:9a:11:78:75:67:90:64:cb:ad:32:b3:
81:91:c6:09:01:ae:d7:87:82:ac:52:4e:df:d8:22:
44:f3:21:29:14:40:bd:1d:d8:37:3f:cf:5e:84:55:
f1:7d:25:7d:2d:07:7d:00:90:02:81:98:20:3d:51:
72:74:f8:70:bd:3a:5c:df:6e:8b:28:d5:ac:a0:04:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:97:BE:9C:90:F7:FA:11:8F:DA:50:11:DE:09:8E:2A:AF:BB:AC:42
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:69:03:93:e4:9e:06:72:03:3d:17:a3:6d:60:d0:e4:39:
1f:5d:4c:b3:61:30:c6:97:08:cc:65:1d:69:70:34:21:90:36:
f5:9a:cd:73:e3:0c:bb:99:10:d6:9a:f0:39:a4:f9:42:32:eb:
38:42:31:45:0e:f0:d2:f8:bd:eb:9c:55:31:6b:c6:69:5b:7d:
78:00:88:67:2a:7b:0b:5e:49:f8:62:d8:bc:bc:fb:a3:10:7f:
b1:c5:bc:10:6f:d7:e3:80:7b:b2:39:06:71:0b:ae:42:5d:de:
62:c2:95:ff:3a:b1:28:12:67:f2:9b:09:14:9f:4f:32:e6:ad:
2d:67:75:0f:19:1a:46:6e:09:22:2d:24:7b:28:24:a5:69:12:
6c:56:9b:d9:79:6a:04:67:65:13:ca:34:0d:6c:91:57:85:69:
22:f4:58:e0:e4:7a:f0:63:f7:31:d9:3b:93:a3:fa:56:23:2c:
c9:4f:bf:17:91:1a:56:35:65:49:d4:f4:0a:29:76:c3:50:2b:
49:e0:d4:b4:2f:92:7d:4b:df:7f:5d:a5:bf:3e:51:4a:f2:af:
98:f0:f9:6a:e1:78:93:04:2d:bd:d7:12:89:3e:a2:b6:e8:43:
8a:94:c4:24:96:d0:3c:b6:dc:d2:e5:ad:09:5f:19:cc:ee:1b:
63:dd:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:45 2025 by rpki-client