Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: uzzaWdZ5Apv59wjPjCdHfZioJs6o2tHFmICfW0drTt4=
Subject key identifier: CC:D9:A4:E6:7B:41:FD:4C:0A:1F:02:27:98:B6:FB:2E:9E:7C:D2:FF
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 01976F2C794161B8C67060D4FEAE37A40CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 16:01:14 +0000
Manifest this update: Sat 14 Jun 2025 16:01:14 +0000
Manifest next update: Sun 15 Jun 2025 16:01:14 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: tRdi/8KIFYRESJ/76ppox3ae/500wkkZ32F/L7ol9Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:79:41:61:b8:c6:70:60:d4:fe:ae:37:a4:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jun 14 16:01:14 2025 GMT
Not After : Jun 15 16:01:14 2025 GMT
Subject: CN=ccd9a4e67b41fd4c0a1f022798b6fb2e9e7cd2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:2b:d7:38:4f:05:5d:fa:18:93:c5:64:9d:
d6:14:82:cb:89:0e:98:2f:09:a4:71:d9:48:3e:40:
7a:75:02:85:20:37:cd:a4:67:ff:37:8e:74:df:3d:
6b:3a:a0:df:40:7a:b4:f3:9e:81:ee:fb:4f:05:cb:
ce:10:fa:60:5b:bd:af:ee:35:aa:48:c5:be:65:e2:
53:c7:65:7b:11:7c:85:75:cb:e0:3a:08:c4:f1:1a:
08:da:70:e9:ed:64:77:33:b8:d5:57:fd:43:e8:dc:
dc:f5:54:0b:67:68:a6:86:f9:a2:01:46:35:79:70:
46:57:0c:20:6e:c0:59:51:7d:b7:d5:01:70:46:1e:
b2:e0:31:dd:60:03:8e:5d:49:e7:94:06:3a:e7:18:
4a:93:0f:0a:9c:af:b0:60:49:8d:b2:8f:86:39:b3:
29:24:bf:7a:89:8c:8d:59:aa:43:8d:7f:a5:26:ec:
80:55:86:64:76:e1:2e:ba:da:6f:01:13:a7:78:5e:
6a:89:b8:54:86:f2:a2:89:1d:25:45:51:05:87:b1:
33:17:a1:ee:67:8b:ae:53:c0:2b:2d:ea:cb:8a:cb:
4d:28:8a:f9:69:0b:28:37:b1:0e:0d:46:f2:0d:40:
b0:57:0f:4b:38:47:16:49:29:40:c7:d4:0e:3e:d3:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:A4:E6:7B:41:FD:4C:0A:1F:02:27:98:B6:FB:2E:9E:7C:D2:FF
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:49:77:f5:49:81:e2:3e:ec:d5:f5:4c:ac:86:25:27:81:
bc:43:63:d2:be:f3:45:71:53:f4:4d:a4:cf:dc:6b:22:59:83:
90:3c:a0:4c:38:29:b1:16:5e:b4:48:17:14:96:26:0f:4c:0d:
71:54:e0:18:21:35:fd:3b:fb:bc:76:43:3f:70:52:d9:f8:48:
1d:c4:67:25:42:9b:07:b7:85:f6:1f:6c:d3:ea:bb:1a:cc:3e:
c3:76:eb:08:81:ae:36:cd:7c:39:2e:6e:58:25:48:0c:1a:7e:
16:1a:52:7b:3c:86:73:d9:57:e3:e2:b2:08:80:a7:27:4b:68:
ae:95:37:b9:06:9e:ee:ca:64:0e:b2:a1:de:08:0f:19:b9:46:
1b:c4:93:d9:e5:ef:78:e0:1a:16:19:ed:e0:6d:e6:d0:c0:43:
ef:35:ae:ce:0b:86:f1:5f:af:bd:ed:34:fb:bd:4f:8d:48:a7:
36:f3:6e:7d:1d:4b:8c:dd:d5:27:77:5c:7b:7d:7b:62:14:14:
1b:5a:f4:1e:8e:81:85:5a:20:a5:20:72:24:ab:b0:ba:4e:1b:
c6:0a:d0:9a:31:32:68:95:45:b1:08:9d:e1:c9:74:95:12:da:
5b:b5:cb:ae:6b:e5:18:f1:3c:99:78:b3:2a:79:cf:df:0e:c8:
25:53:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:58:37 2025 by rpki-client