Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: lt+gBgtBCimDGPQfaxOodeiBu6n81qWuzNX2aveKPtI=
Subject key identifier: 49:1A:49:05:B1:68:28:0B:E6:68:7B:2E:D7:76:75:28:00:84:80:F0
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 019788EB8B7C62C3D01065DE388AA9A72882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 16:00:27 +0000
Manifest this update: Thu 19 Jun 2025 16:00:27 +0000
Manifest next update: Fri 20 Jun 2025 16:00:27 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: vuY/YtRACxP4UGRRmRhOXCuGA9y5QXN0b+TylRwMJbA=)
2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:8b:7c:62:c3:d0:10:65:de:38:8a:a9:a7:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jun 19 16:00:27 2025 GMT
Not After : Jun 20 16:00:27 2025 GMT
Subject: CN=491a4905b168280be6687b2ed7767528008480f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:3e:3d:59:4e:61:ce:4e:b8:39:50:59:17:
37:92:77:4e:8a:c3:89:53:68:1e:45:8a:4d:21:4c:
6b:4e:c8:c1:b3:f1:39:18:ea:7d:60:c2:8b:51:53:
35:5a:d6:84:1f:2d:1e:16:79:0c:ee:0d:60:55:9a:
15:8e:d0:ee:c9:7d:57:f9:d6:6f:98:bb:ee:ec:63:
c8:2e:e1:07:4d:9c:52:9c:7c:9f:7e:51:e8:99:45:
3f:ac:08:11:50:82:b4:69:5a:f3:f7:ee:26:8a:b6:
bc:eb:f0:13:43:6f:e3:5b:5d:57:48:1a:39:1f:aa:
be:ff:c0:8b:b7:7d:36:4b:0d:a3:11:22:c5:83:c1:
53:71:97:39:32:e2:a5:fd:9a:2d:63:cb:f5:e0:0a:
60:9b:a5:02:12:94:2a:35:1f:32:5f:27:25:3c:ef:
70:4e:91:9d:af:03:68:7d:57:ed:de:33:7b:f6:70:
69:d3:38:01:2d:44:af:22:a9:2d:35:7c:34:79:22:
81:b6:2e:5a:bc:13:77:7c:db:ce:f3:ee:1a:37:f5:
0b:65:9b:81:ad:a7:e7:8b:10:25:fa:1c:f8:12:2c:
65:c3:ca:b6:91:c8:fb:1a:4e:95:f7:49:30:76:9c:
45:57:b5:e8:85:8c:e2:36:33:e8:81:04:8a:78:23:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:49:05:B1:68:28:0B:E6:68:7B:2E:D7:76:75:28:00:84:80:F0
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:2f:7e:d2:e2:00:4b:fe:ce:3b:70:64:fd:8b:aa:0b:1f:
33:ca:67:36:bb:c7:7f:0f:15:c4:7e:23:71:96:41:8f:ae:08:
c9:7b:17:46:d6:66:9d:24:34:8d:c8:5a:67:ec:3a:cf:b7:66:
8c:bb:e3:ac:fb:85:12:6e:d4:f3:b7:c0:8f:7e:43:f6:e5:ee:
72:83:d9:91:04:28:2b:f3:f3:58:a7:c4:7f:7d:d5:82:bd:39:
f4:db:c7:fb:89:2a:2d:f2:d3:a0:49:66:44:22:dd:75:4e:04:
de:83:2a:a5:82:38:79:93:c9:f6:d6:59:02:cf:a3:e7:ec:6b:
49:b6:97:70:b2:b6:cb:ce:d5:9d:02:67:04:f4:cf:06:9b:9c:
80:fa:77:29:da:b9:d8:0f:9e:1a:46:4c:29:c9:c5:fd:c4:9f:
bf:a9:5b:5d:b8:cd:4f:d4:a3:51:e0:2f:09:3b:d7:55:7c:56:
ef:2a:e8:90:34:a3:35:a7:e1:32:9a:9e:e5:5b:21:5c:40:ca:
aa:53:be:79:52:3e:c7:c2:06:1e:ec:22:b9:45:d7:30:b3:7e:
7d:49:95:14:a9:ad:82:ae:de:f9:0a:48:60:2f:e7:0e:68:dc:
4b:b0:5b:75:f9:fb:fb:6e:aa:ea:68:5b:8b:81:c4:cd:e6:15:
e6:c5:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:13 2025 by rpki-client