Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: UrTjqwWcikESuBimTsxWyKpM+e0Tp9RCxLDpnQNm5Mc=
Subject key identifier: 20:AD:28:E7:10:0D:90:F2:6F:2F:E4:99:FC:95:4F:1E:D2:68:4B:A5
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0197722CE5CF5DC15B1ECEA5D6EAC772117C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0634
Signing time: Sun 15 Jun 2025 06:00:34 +0000
Manifest this update: Sun 15 Jun 2025 06:00:34 +0000
Manifest next update: Mon 16 Jun 2025 06:00:34 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: uE6zNj4Re2s3B5dth+aRdxX4iI5dA2X4bSrmCCUsKpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:e5:cf:5d:c1:5b:1e:ce:a5:d6:ea:c7:72:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jun 15 06:00:34 2025 GMT
Not After : Jun 16 06:00:34 2025 GMT
Subject: CN=20ad28e7100d90f26f2fe499fc954f1ed2684ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:dc:8c:86:c6:c5:f1:18:50:31:97:9b:91:
6d:bd:ae:4b:60:7d:a8:5c:0f:0d:a5:2d:da:62:b0:
bd:77:16:89:8e:5c:45:30:4a:64:e6:73:d5:5e:bc:
93:8a:5d:4b:e5:f7:75:0a:b8:5d:7f:00:54:1f:30:
56:2d:09:ce:93:0e:8b:38:9e:fb:5b:25:9d:4e:73:
60:82:98:04:cf:19:1e:11:cf:a4:90:2d:56:b4:35:
d3:47:bc:a5:d7:72:1b:da:bf:01:87:1b:58:4e:ac:
ce:0f:cd:12:be:f3:ef:41:11:d3:38:ae:90:89:92:
17:f6:83:97:0e:7c:8f:db:2f:77:c7:1b:53:5b:73:
a1:58:03:c2:74:8c:38:a6:5e:ed:d9:4f:28:73:40:
11:f0:fe:2b:dc:a9:c9:b9:5f:dc:65:cc:01:50:f2:
ef:b9:84:53:1c:34:c5:df:71:89:17:68:41:42:40:
f4:01:8b:c6:0b:70:bc:bb:a4:f4:6c:2a:b4:95:9f:
e4:0f:bf:34:57:0d:42:5d:28:94:7a:2b:b0:ba:95:
67:15:3d:0f:61:75:b1:d0:f5:f6:96:97:71:5d:70:
e3:64:50:5e:2d:b2:7a:d6:e9:b3:52:51:03:2f:61:
4d:7e:9f:53:62:62:9b:66:0a:a7:ea:84:f5:96:f6:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:28:E7:10:0D:90:F2:6F:2F:E4:99:FC:95:4F:1E:D2:68:4B:A5
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:c4:7d:f3:94:b9:32:42:be:d2:02:f3:dd:30:76:71:b3:
f1:ba:60:aa:97:5a:a6:6f:ff:53:e6:6e:f0:3e:54:47:c4:7d:
c3:e3:aa:08:2e:99:d1:30:a5:f6:ed:d9:e5:95:c5:23:24:a9:
f2:e3:d2:8b:bf:2c:58:8e:db:7d:a3:c7:d7:4c:b6:c3:da:41:
c1:0b:7b:1d:0f:8e:e5:52:f6:9b:0c:07:53:ab:50:cd:4d:f0:
35:8e:fd:6e:55:4c:14:9b:80:4a:90:28:f9:59:84:d8:84:4a:
84:c5:ce:05:51:a4:79:37:ea:9a:5d:c9:08:d7:27:f1:39:1d:
68:43:b7:8f:3a:ef:18:b8:bf:37:71:b8:6a:3c:a5:f8:e9:f2:
85:a9:4c:bd:e5:50:41:65:12:42:58:30:fe:71:3d:3c:53:58:
73:02:37:8c:b7:41:43:da:20:2e:03:3b:03:c2:ad:fe:17:90:
7b:59:31:48:ec:2b:96:7f:66:1a:a8:b2:27:9d:1f:e2:8c:67:
2e:20:c6:b7:90:64:3b:66:6b:fc:e4:f9:86:e6:03:74:92:e6:
02:e2:6f:6b:51:2a:a2:91:ad:cc:ac:3b:81:29:17:e4:70:ec:
c9:2d:65:35:c1:3c:19:82:04:a8:61:a6:08:15:ea:f3:cd:1f:
9f:e5:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:34 2025 by rpki-client