Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: +00EP6+j0VZtEa8nQC7Na1wNCl/p0CiWUd9HiL2E6S8=
Subject key identifier: AF:52:A7:86:19:18:42:FF:F9:12:CE:46:09:3C:57:34:4B:05:8B:1C
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019769299228161C620E9269B2762B3C0266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 10F9
Signing time: Fri 13 Jun 2025 12:00:21 +0000
Manifest this update: Fri 13 Jun 2025 12:00:21 +0000
Manifest next update: Sat 14 Jun 2025 12:00:21 +0000
Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: QWl8/96qiqSQhZhERR3D6A0oPL+0fpsZ0cI9U9qW4UQ=)
2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:92:28:16:1c:62:0e:92:69:b2:76:2b:3c:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jun 13 12:00:21 2025 GMT
Not After : Jun 14 12:00:21 2025 GMT
Subject: CN=af52a786191842fff912ce46093c57344b058b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:92:09:d4:3c:2a:1d:ce:42:48:1b:cc:0a:
77:e8:98:b7:18:cb:c1:aa:de:ef:be:18:98:ab:50:
a8:7f:d1:22:4a:a9:13:63:1f:d5:67:77:8d:89:f8:
b8:d3:43:ed:5c:d7:7c:fb:8c:fb:ca:81:97:00:e8:
55:97:0f:a0:25:af:37:82:0f:2c:3c:0f:35:c5:cc:
07:66:25:b0:ee:0b:d7:3d:2a:56:ca:a6:91:9c:00:
0b:e6:67:0c:43:6a:b3:9d:e4:d8:40:a4:f0:8c:55:
6a:5c:03:e4:da:53:2e:19:45:82:3d:e6:42:dc:94:
90:47:4d:7e:55:87:07:20:5b:c8:d9:fc:f4:0f:f0:
11:41:3e:5b:bf:bf:a0:2f:e5:60:4d:5d:34:0e:82:
f0:cb:bc:06:28:32:ec:51:f8:93:8d:ae:09:3d:12:
d7:c0:90:47:1f:a3:c0:c3:e7:b7:51:a8:c6:d6:2c:
26:84:a6:c1:9e:62:f9:18:b7:b1:e8:86:53:93:10:
cd:7c:ae:7f:4c:f4:b2:d1:6a:79:6f:cf:21:f9:09:
bd:06:16:ed:97:a1:18:96:8a:08:62:f3:cc:85:95:
ca:51:cf:4a:cb:54:31:ab:b8:53:a3:06:e2:3c:af:
30:57:08:9f:24:ca:1a:08:d6:2a:e5:5d:29:4d:aa:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:A7:86:19:18:42:FF:F9:12:CE:46:09:3C:57:34:4B:05:8B:1C
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e2:95:bd:34:3c:1c:a0:15:f1:c4:be:96:56:bf:bc:e4:ab:
a0:f9:5f:1c:1b:4d:9e:4b:54:59:f3:26:f3:ed:41:29:fe:95:
64:85:22:d9:40:db:69:39:e7:8c:58:d1:35:d4:83:38:71:14:
2f:c7:3d:c4:e2:39:11:2e:4b:fc:b7:11:48:db:99:5e:97:f2:
d6:83:8b:bf:1c:be:15:10:e8:ee:48:72:aa:00:5c:90:ec:a0:
6b:3a:c4:73:a5:fa:e6:bb:da:8f:41:fe:86:9a:85:19:44:f7:
fb:1e:3e:7c:34:3e:60:dc:bf:bc:ad:2a:8b:4d:e1:b7:ab:2a:
4c:4e:98:c5:bd:08:0f:2a:fc:5d:53:08:d6:43:66:e7:95:4d:
a2:23:ae:6a:14:be:51:23:e9:10:55:96:06:23:20:e0:6d:83:
5d:75:e8:e0:13:03:2a:7a:39:64:76:61:65:13:2b:22:6f:41:
f2:b1:38:80:66:86:0b:c0:a4:71:4c:94:a4:ab:00:94:0f:09:
a0:19:15:71:cd:13:8e:36:2e:42:80:53:d0:64:7b:b6:97:29:
4f:53:8e:e4:cc:9c:7c:67:4b:8c:0f:96:dd:fe:82:5f:3d:70:
a5:14:51:8e:c9:64:01:d7:be:72:19:14:ba:06:60:da:b3:ef:
1b:04:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:56:07 2025 by rpki-client