Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: gNQ9S2k2FlRnh6kpUy0ydDCLyj69PkGPFycVoBalJuI=
Subject key identifier: 41:09:07:2D:06:8D:E7:7A:55:E8:63:FE:DF:74:69:2C:96:D5:D6:3B
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 0197684E84EB9DD8E0A4C60BD2665DCA5F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 040B
Signing time: Fri 13 Jun 2025 08:01:05 +0000
Manifest this update: Fri 13 Jun 2025 08:01:05 +0000
Manifest next update: Sat 14 Jun 2025 08:01:05 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: iWm6B4gUfGPBlUdkuJ6YSdIN5E58IggPW2aLdWhf0vM=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:84:eb:9d:d8:e0:a4:c6:0b:d2:66:5d:ca:5f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Jun 13 08:01:05 2025 GMT
Not After : Jun 14 08:01:05 2025 GMT
Subject: CN=4109072d068de77a55e863fedf74692c96d5d63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:8b:8c:05:a4:79:e3:5f:64:9c:0a:c3:78:
b3:b4:37:94:40:f8:5c:b1:5d:02:ab:82:c2:2d:c5:
0f:33:9a:50:e7:5f:5e:27:5e:8c:66:3a:00:5d:f5:
40:28:e9:a1:c2:83:6d:70:33:10:60:25:57:80:ac:
e5:dd:1f:41:c2:18:15:d1:b3:a0:6b:0a:ab:bd:8f:
c4:b5:87:53:e6:5b:8f:49:d1:2d:38:f8:ce:f4:77:
3c:46:1a:2b:7b:35:8c:77:31:e5:46:73:e5:49:c9:
ba:7a:06:da:42:e7:62:a6:d9:23:c0:da:eb:cc:cc:
90:5c:79:3f:eb:16:f6:38:e6:e0:13:aa:72:47:0b:
9c:0c:59:21:f1:30:e6:8c:36:b1:a5:a4:08:d5:a4:
b7:79:c4:11:00:6b:ec:06:a5:0d:5d:40:4c:d1:f9:
e0:b2:b8:cc:6e:01:b2:5c:5f:c9:2d:8a:da:c9:a1:
09:fd:ee:39:70:9e:ae:15:59:ca:2a:0f:bd:47:98:
60:77:57:d7:68:71:13:fa:19:b0:08:8e:99:da:ef:
f8:11:cf:2d:a0:cc:01:36:32:82:d7:ce:3f:13:d0:
5b:7a:60:0c:5a:e1:6e:c1:28:2a:bd:1f:29:09:0a:
5f:68:76:02:8c:ff:35:07:d5:54:fc:8c:31:44:69:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:07:2D:06:8D:E7:7A:55:E8:63:FE:DF:74:69:2C:96:D5:D6:3B
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e6:1b:91:f8:87:e6:e7:83:5d:dc:86:73:7a:73:fd:01:f6:
d2:63:5a:78:27:ce:00:b1:92:8e:50:90:97:64:50:44:80:a4:
3d:74:12:29:0c:ba:8b:6f:bb:8f:d3:b0:f4:5c:87:c8:dd:a3:
35:68:5e:8b:62:e2:e1:8c:c4:64:94:51:5c:fd:f8:ca:51:1a:
b8:98:05:e9:13:20:b6:91:79:e2:0d:a0:9b:ed:2f:5c:c8:65:
13:0e:1f:d8:96:38:aa:e3:fe:ff:35:4c:a2:15:b0:97:26:fc:
53:9d:cf:bb:f8:67:66:00:c9:1c:dd:a4:2f:52:1b:ae:09:48:
aa:70:ff:dc:0b:ac:5c:23:9f:7c:e6:4d:57:4a:d9:c4:0a:e3:
1a:f7:95:9b:ed:33:73:4c:09:3e:de:a3:e2:2c:c3:0c:51:f5:
27:e9:db:b7:8e:fa:6c:05:76:9e:36:71:27:94:7a:7a:df:b2:
72:64:82:50:49:24:a9:ca:0e:05:2b:6c:75:53:9e:90:4f:f2:
c9:f8:58:40:54:cc:f4:dc:78:2c:9d:fd:b2:f7:ef:7f:b4:31:
21:9e:1c:35:3e:51:67:81:a7:d6:22:4c:4f:80:6a:53:a8:92:
cc:90:38:45:97:72:cd:a6:cd:81:f4:f4:6e:7f:c6:41:8b:73:
6a:3e:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:25 2025 by rpki-client