Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: K/ZYbBUT71rpgV1X0wvO9Mdp3bHVx8Mt+C62SFm26AI=
Subject key identifier: 9B:8F:E6:CC:A8:1B:D9:B1:A7:C5:FB:C1:0F:DE:66:35:30:07:86:83
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 01977BD4B563969D798D5994A22C96E10431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1507
Signing time: Tue 17 Jun 2025 03:00:26 +0000
Manifest this update: Tue 17 Jun 2025 03:00:26 +0000
Manifest next update: Wed 18 Jun 2025 03:00:26 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: CDRRgAFaoeoTLZtM269SZoZtsBEFjDrlx/o4DmFVuBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:d4:b5:63:96:9d:79:8d:59:94:a2:2c:96:e1:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jun 17 03:00:26 2025 GMT
Not After : Jun 18 03:00:26 2025 GMT
Subject: CN=9b8fe6cca81bd9b1a7c5fbc10fde663530078683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:b7:9c:5a:46:23:c5:78:c4:55:40:cc:a6:
eb:d7:b9:e3:aa:78:bf:7b:11:51:92:89:01:2a:f3:
46:98:75:de:75:3c:77:61:c3:90:6b:4a:ac:08:18:
67:cf:43:eb:0e:88:43:4a:7a:3b:01:8d:c6:45:2e:
77:3e:b3:d8:69:a7:15:2d:12:9b:60:10:f8:97:e1:
9d:3c:74:be:45:6e:00:e0:f0:0e:ee:76:27:e2:67:
0b:97:a0:98:0f:18:fd:c5:51:52:33:56:08:f0:d8:
f3:97:88:0a:76:fb:73:29:d6:be:cc:25:aa:1a:75:
3e:33:08:c2:d5:99:40:63:34:bc:e5:e7:f7:d7:32:
35:1f:7b:f5:b6:9f:0f:50:2b:97:fc:62:57:7b:77:
98:59:cf:fd:3a:31:3c:9c:53:d9:07:b9:9b:da:f3:
ba:bb:86:05:d5:1a:26:66:7b:7e:3e:bf:63:31:6f:
27:7c:26:c1:5f:0f:c0:bc:f6:98:c6:50:65:35:09:
c4:69:b1:d8:b3:b3:77:ce:00:7f:fe:b2:d8:8f:ef:
64:d4:02:2c:9a:50:ee:89:7f:04:bb:63:9b:02:4d:
49:40:b8:6d:af:37:4d:f6:05:af:2f:e8:50:15:4a:
e1:6a:33:14:8a:56:5a:bd:9b:c6:21:30:08:a2:3e:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:E6:CC:A8:1B:D9:B1:A7:C5:FB:C1:0F:DE:66:35:30:07:86:83
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e0:2e:0e:5c:e6:e0:62:cf:47:f8:aa:b8:dd:0f:5e:0d:04:
fa:db:2f:66:d1:2f:ed:97:80:42:01:8c:8e:4b:10:a8:30:16:
c2:61:35:df:16:fe:2a:23:de:f1:8e:4d:c3:e9:78:29:2d:af:
45:2e:c2:c8:33:5a:02:51:b8:97:56:e0:cc:b8:36:af:3a:ac:
1a:43:c5:a6:6e:c3:fc:48:f2:24:28:c6:74:66:89:4c:7a:6f:
34:56:4a:00:63:48:37:9d:44:4c:ca:82:20:d5:98:d4:e7:4e:
a5:b7:c4:07:96:0d:ce:d4:c2:8d:61:d2:49:ae:d1:38:6c:cb:
92:f4:f5:95:bd:4d:e8:fa:89:60:74:f4:4b:b5:2f:fc:ae:bb:
72:07:2b:6b:4a:e4:9c:53:54:99:72:69:dc:8a:84:f5:bc:cc:
b0:d0:f4:f3:79:b0:2a:0e:7f:b1:68:af:b2:8c:87:a5:50:d5:
ca:55:f6:0c:ec:a5:f4:f0:aa:c2:b9:08:fc:cd:64:56:6f:35:
bd:41:3f:d8:9c:0f:de:ef:e3:03:3e:7d:e5:97:96:b1:19:2d:
e6:7c:24:a0:3f:e6:4f:a5:5c:e6:7d:8c:23:37:ed:ef:0f:96:
80:53:56:ea:fb:e0:7e:8b:ad:f3:72:c7:53:fb:59:78:92:42:
f8:0d:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:27 2025 by rpki-client