Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: MIC4WU+ks4HA5XDfuI+e4QHnUU5IQIfOISr7pPRXbQg=
Subject key identifier: 97:35:07:58:AE:FC:66:8A:AA:97:BE:AC:0C:F7:B7:D6:23:F1:C9:FC
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 01976C62142E59350655793BADB442F72337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 11F0
Signing time: Sat 14 Jun 2025 03:00:56 +0000
Manifest this update: Sat 14 Jun 2025 03:00:56 +0000
Manifest next update: Sun 15 Jun 2025 03:00:56 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: GdkXd4LoJuoUTkSFk/HUSyk8ZTD4GkKw6Gk5HUem/+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:14:2e:59:35:06:55:79:3b:ad:b4:42:f7:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jun 14 03:00:56 2025 GMT
Not After : Jun 15 03:00:56 2025 GMT
Subject: CN=97350758aefc668aaa97beac0cf7b7d623f1c9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:cd:4a:24:b6:4f:d6:30:2c:87:2e:bf:48:
11:24:21:79:7d:bb:75:db:31:10:e9:1f:b5:82:b4:
d3:ea:58:e7:59:33:46:54:6e:eb:aa:28:2a:77:34:
d5:77:77:85:52:f4:d9:ef:d3:c8:ac:c7:52:45:96:
42:6f:7c:5b:e5:f6:2a:2d:59:eb:ce:27:c1:ee:28:
a4:d1:4f:e4:96:40:25:09:69:4d:bc:10:a0:46:9d:
dd:9c:04:a3:d2:4d:df:ec:27:d3:13:9f:6e:e4:25:
8a:95:7b:d5:b4:13:0b:36:10:97:4a:0a:ec:14:f2:
7a:ba:11:3d:54:55:d4:26:aa:67:c7:b7:3a:0d:46:
31:81:41:5d:59:29:52:8b:c0:be:2f:f3:2a:43:20:
0c:e2:a4:fe:9c:30:fa:91:fd:e0:2f:5b:84:66:c1:
ee:5e:57:80:be:9e:43:3d:db:ac:69:37:a9:38:f5:
ca:bb:cc:17:dc:88:4b:a3:4c:89:36:21:da:8c:84:
d8:ad:f0:cf:50:88:a1:8d:1f:15:25:ce:de:a0:b9:
b3:e3:ab:76:73:f9:07:25:6e:8a:8d:a6:bc:dd:00:
49:d6:ad:d5:9b:79:9d:1b:a9:27:10:76:3b:02:e9:
b2:f2:e7:11:e8:1a:c1:b8:89:d0:15:9d:0e:6f:18:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:07:58:AE:FC:66:8A:AA:97:BE:AC:0C:F7:B7:D6:23:F1:C9:FC
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:38:3f:f5:f9:9d:00:b3:7d:e7:2e:b8:2a:d8:84:93:ba:
cf:44:6f:e0:23:c1:3a:a8:7a:8f:1f:6c:08:ae:a3:d4:0c:b0:
51:90:f7:66:d3:69:9b:fc:00:f1:0a:37:65:d5:79:12:12:5e:
46:d2:18:5a:4c:ee:77:74:7b:df:7b:f8:19:ee:83:01:dd:e9:
3d:11:8f:5a:c2:a6:db:6d:7b:7b:dc:ab:c4:90:5f:0b:e2:3a:
77:92:a3:b4:63:f5:0e:de:78:3b:89:df:c2:e1:f2:4e:42:da:
69:2f:98:fe:72:23:25:f1:10:a3:db:ac:20:4c:7d:9f:26:c4:
18:1b:c3:bf:8d:b8:ff:5b:74:6f:19:4d:2c:32:57:82:f2:5b:
c8:ec:b4:4d:d0:47:fa:2e:61:02:ae:03:a5:a9:1d:14:64:c2:
50:a5:66:69:99:73:7b:18:26:a7:22:79:4f:ae:cd:11:4e:d4:
05:ef:d7:59:93:0c:44:b8:f5:4a:54:20:90:30:45:ad:97:b9:
80:73:fc:06:79:99:28:26:66:98:04:4e:27:26:f7:fc:b9:ec:
e5:cc:a2:6e:a2:98:80:14:db:78:b9:ba:38:ba:d8:7a:2f:09:
99:95:c7:33:86:d1:55:da:5c:67:98:48:3e:30:30:8b:c3:a8:
58:7d:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:17 2025 by rpki-client