Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: HM3zK7NStetJvTs5vm0z1QbkdMwHNEFKuEmlkr9kFKk=
Subject key identifier: 5D:85:AC:BC:49:72:F2:CC:12:D6:DC:37:EC:68:BD:9C:D3:1A:DD:0A
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 01976C62148FA73A76791CF033A03967B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 03D1
Signing time: Sat 14 Jun 2025 03:00:56 +0000
Manifest this update: Sat 14 Jun 2025 03:00:56 +0000
Manifest next update: Sun 15 Jun 2025 03:00:56 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: C/rVZlmKpxF4RrnUrzPWubF7VLJBt9hA90v580X+E60=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:14:8f:a7:3a:76:79:1c:f0:33:a0:39:67:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Jun 14 03:00:56 2025 GMT
Not After : Jun 15 03:00:56 2025 GMT
Subject: CN=5d85acbc4972f2cc12d6dc37ec68bd9cd31add0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:8b:c2:f4:f1:92:3b:02:1b:5b:bb:de:4c:
1a:ce:8f:7d:16:2e:cf:be:4b:d8:eb:01:0c:5b:2a:
9a:5a:02:83:62:e0:1a:29:a5:ba:5e:21:00:44:0f:
29:f6:c1:ec:87:6c:cf:e3:8b:28:ab:d3:14:b6:00:
6a:d9:b7:5e:52:eb:2c:8f:da:91:ed:d9:32:65:c9:
15:5e:bc:e4:25:bf:fa:87:7e:4f:97:83:b6:ef:8d:
52:ff:0b:af:c3:3f:ac:cc:09:63:8d:7b:90:ae:8c:
f4:28:0e:22:be:bb:9d:a8:e7:e0:a5:dc:38:b0:0f:
cd:98:54:8e:c4:14:ee:59:4c:4d:09:3d:1f:f0:57:
2d:5f:df:0d:ee:8d:6d:ef:c4:e7:47:5b:4f:e6:69:
2e:a3:cc:85:96:eb:de:1d:91:93:e1:68:bc:c7:fc:
68:7c:74:ef:aa:5a:7f:90:72:d2:6e:d8:d9:ee:84:
69:95:56:20:a6:51:ff:e0:75:f4:c4:89:3f:f9:b1:
fa:4c:b4:4a:7e:ff:33:3f:89:35:10:0d:bf:3a:9b:
59:b6:f7:31:e2:f6:e1:a8:a5:3b:8e:68:42:79:ba:
fb:93:fb:b0:b2:ea:be:2a:e3:86:13:68:6e:f0:f2:
1e:2b:cb:33:ac:ed:48:ab:e2:a3:40:84:a8:02:07:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:AC:BC:49:72:F2:CC:12:D6:DC:37:EC:68:BD:9C:D3:1A:DD:0A
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:7e:04:8a:e1:60:f5:51:0d:f5:3c:9a:fb:39:40:89:32:
63:5b:ca:7d:9d:85:3e:ad:de:b9:c7:d1:2a:a2:ff:fe:76:8a:
f2:53:3b:d4:ac:9b:33:42:ab:1d:e0:6e:f6:29:2b:10:21:5e:
fd:67:a1:3b:39:aa:24:27:33:83:08:f4:b9:c2:0c:85:79:80:
24:30:4b:d1:0e:9f:14:88:c3:a9:66:ef:bc:9a:da:74:10:71:
13:4a:9c:b2:be:82:2a:2f:4c:ad:a2:96:7c:2a:67:e8:ed:38:
7d:f8:a0:ef:a5:d9:1b:90:88:e9:7c:70:59:ac:e1:9a:68:ec:
bc:cb:94:ba:76:c4:d4:d7:eb:cb:08:23:e0:ef:93:ce:63:21:
6a:47:ca:c6:6a:40:aa:99:5e:7b:44:75:7e:02:76:1c:31:94:
e0:e7:46:21:09:e7:da:4f:ee:01:21:d6:24:27:bd:48:b8:0d:
26:2b:be:99:2d:91:8c:72:7b:e0:b3:93:b6:33:f1:9a:b6:57:
bf:d0:1c:f9:45:7c:a6:64:d0:ce:8a:64:31:da:45:0d:a9:de:
2b:50:f5:2a:2e:f1:dc:29:13:06:b8:b7:94:12:c9:35:6b:3f:
b1:69:50:96:f7:5b:a2:b0:63:94:27:59:2b:53:91:58:f2:54:
88:ed:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:27 2025 by rpki-client