Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 5DLV9AHn08QxLHyC+Y2poW4tjeFoyMf7apsIQIiiQZQ=
Subject key identifier: 7D:CA:2E:88:65:21:3F:C4:CE:2B:3F:4D:C5:3C:7F:E3:BA:EB:AF:A7
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019777F840676983982F4574C6ED4560E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 09:00:47 +0000
Manifest this update: Mon 16 Jun 2025 09:00:47 +0000
Manifest next update: Tue 17 Jun 2025 09:00:47 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: iCk+VehvkvIKZqB7EigtAhXBBO1ReWuLgoIJz20yyxU=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:40:67:69:83:98:2f:45:74:c6:ed:45:60:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jun 16 09:00:47 2025 GMT
Not After : Jun 17 09:00:47 2025 GMT
Subject: CN=7dca2e8865213fc4ce2b3f4dc53c7fe3baebafa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:98:c1:e7:10:95:bf:e8:10:7f:dc:3f:c1:
f6:49:a8:61:be:8b:d6:9e:d7:52:e8:4f:01:7f:33:
a9:f4:9d:dc:b5:b4:2c:dd:01:cd:c1:3b:14:67:c7:
8b:96:ec:64:50:b8:77:96:c9:4c:6a:f3:3e:2d:75:
06:e2:75:9b:1d:7b:32:5d:09:92:5c:39:aa:7a:79:
e2:c7:e4:84:c7:18:2c:90:30:f4:08:89:1e:7b:46:
7d:e2:fa:30:61:16:c9:77:10:1e:60:09:14:da:1b:
16:9c:ca:24:99:9b:59:c9:cf:43:9f:17:3e:2f:e1:
36:57:30:9a:94:23:30:38:4b:e0:47:0d:47:c1:47:
2b:5e:76:a8:a2:94:44:50:c3:0f:62:cb:f4:ba:7d:
9c:0e:b3:a2:a4:53:ea:b0:fe:ad:39:6d:e0:ba:9c:
a5:c6:de:30:0e:06:58:a9:4d:b5:a8:65:29:ce:21:
04:a5:1f:29:43:31:49:5f:5a:f8:b4:f1:22:bb:30:
3c:0a:6e:5f:e4:56:14:13:24:76:27:1e:42:76:ab:
6b:d6:ee:12:77:6f:c1:60:de:b9:8a:78:f7:12:26:
6e:67:70:46:df:6b:d4:ac:0a:e1:7f:62:bf:67:57:
79:ce:c9:2d:6a:02:29:20:06:1c:5e:4e:b2:e0:0a:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:2E:88:65:21:3F:C4:CE:2B:3F:4D:C5:3C:7F:E3:BA:EB:AF:A7
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0c:99:08:77:ed:36:0d:a6:b2:51:58:38:3e:fb:ea:4e:57:
db:4d:02:17:d4:10:57:c9:78:09:b5:fd:f7:70:94:00:b3:4f:
55:51:f2:e2:f8:ee:94:ae:ae:f8:9e:59:54:e4:ab:04:2d:3a:
58:21:57:22:fc:cc:d3:24:f1:36:eb:b6:14:34:c7:86:48:63:
5a:e0:31:42:37:9e:b0:96:75:62:27:d1:24:21:74:37:61:63:
2a:a7:bb:50:dc:75:b1:58:65:3b:0b:6a:8b:5f:34:5d:a0:bd:
da:68:e9:6d:58:dd:72:1b:b8:b5:1e:f9:ca:cd:e8:81:5a:d6:
c3:13:39:16:20:99:a0:8d:a5:ad:de:fb:47:17:cf:34:ba:37:
47:36:e2:0c:49:38:f3:9d:a3:c3:87:7c:90:1f:e9:28:0a:2a:
13:85:dd:5b:8c:ac:eb:8d:75:ab:06:71:f7:cf:a8:3b:28:b8:
50:8d:de:c1:64:a8:a7:cb:9b:da:a1:13:31:fc:0f:76:6c:15:
ff:91:05:67:8e:ba:bd:f1:66:11:dc:3b:cd:8d:95:f1:79:c8:
4e:cf:a2:c8:47:cf:64:91:fa:4a:41:fc:64:ef:a0:8b:5a:cd:
5c:1e:1c:a2:8d:79:9f:ee:31:73:29:69:8f:5c:02:3c:47:2f:
d1:04:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:56 2025 by rpki-client