Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: hbNQa5fhNYJCZ3d+R/O2EyQ6Y/2+J9D6F8qyMIBdrIY=
Subject key identifier: 45:E8:D6:05:4F:3D:60:98:A2:4C:3B:F6:70:5B:C4:6E:06:21:F3:6A
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01976884F81B45DA6456B896F9013C68542E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:34 +0000
Manifest this update: Fri 13 Jun 2025 09:00:34 +0000
Manifest next update: Sat 14 Jun 2025 09:00:34 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: 5sSN/YjThIVjV61gIHoQjUf/if9bzc+gfFCw1oXvj+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f8:1b:45:da:64:56:b8:96:f9:01:3c:68:54:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jun 13 09:00:34 2025 GMT
Not After : Jun 14 09:00:34 2025 GMT
Subject: CN=45e8d6054f3d6098a24c3bf6705bc46e0621f36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:61:41:7d:ee:2b:f2:af:68:28:f3:17:c5:
a6:67:5a:00:d3:16:76:b8:1d:d5:96:ae:ff:dc:37:
47:09:74:a3:df:64:c0:ee:f9:8f:03:d2:3e:83:ca:
8b:96:e3:dd:aa:a1:b5:e7:ff:b4:1c:bd:3b:59:19:
5f:42:33:c8:eb:98:c7:b4:ac:77:96:c6:f6:59:45:
6a:ce:6f:90:81:fb:81:19:e3:4f:96:4e:90:0c:0c:
97:17:f5:51:ca:e8:3c:18:b6:1d:bf:39:97:0f:1d:
8d:ff:52:5b:19:5d:53:d9:63:05:50:14:e3:8e:62:
33:ea:40:7a:c8:b8:d3:22:d5:4b:73:5a:4a:87:89:
fb:6f:85:61:a2:d7:42:62:97:07:e5:c5:ae:70:75:
22:7e:1e:2e:ab:07:82:fa:40:be:d2:3a:de:a7:2c:
39:74:42:bf:88:d5:45:ab:87:b3:2e:78:a1:b9:54:
b8:74:fc:9f:27:98:d2:58:c8:9d:e6:0d:e1:10:10:
74:73:7d:9c:e5:44:94:84:55:e8:aa:c2:ca:58:0c:
8d:69:d2:59:7c:d7:5e:d0:79:5b:80:8c:50:cc:fc:
a9:08:64:75:2e:75:af:41:77:5a:b0:bb:b0:71:f0:
50:56:9a:36:f0:61:81:22:7a:46:54:ea:b5:8d:e7:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:D6:05:4F:3D:60:98:A2:4C:3B:F6:70:5B:C4:6E:06:21:F3:6A
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:f1:66:92:df:8e:59:31:90:05:b8:0a:d4:a5:9b:ed:10:
51:d6:97:25:d6:c5:88:30:02:ba:bf:a2:fc:1e:7d:a6:f5:fa:
1a:a2:6d:54:bd:c8:e0:90:c5:a7:5e:ca:6e:67:0f:5a:b0:3e:
eb:73:f4:f5:87:45:3f:ac:ab:a1:73:4a:51:0f:c0:ae:5b:03:
d1:39:95:7a:22:94:b0:34:ef:9b:cc:31:b0:11:fa:a0:45:99:
76:ef:1a:58:6d:67:e4:69:09:36:d2:c1:4f:40:dc:fd:c0:05:
dd:4a:90:bf:53:05:96:16:1b:12:03:7d:9b:66:71:2a:8b:6c:
57:dc:f6:ef:97:13:0d:cf:df:16:b8:09:fc:3e:90:94:b2:18:
a5:83:46:6a:2b:c6:e0:67:e8:9c:8a:7e:62:0f:3d:6b:14:ac:
a2:8f:5b:37:0f:85:13:bb:db:71:8f:84:b9:a8:da:35:69:23:
b2:fa:40:d1:ec:fc:f1:e0:09:99:7e:4b:c3:95:b0:c7:81:6e:
22:6f:02:67:e3:9a:c2:eb:cf:fd:fa:c8:f2:7a:d5:f8:c0:e0:
49:8d:09:26:3c:bf:75:51:e0:93:f2:1f:37:52:bc:5c:49:d1:
43:d6:c9:cc:63:a8:db:e3:e8:d9:e2:fc:93:3d:6c:13:5c:02:
d5:d5:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:46 2025 by rpki-client