Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: nAHVVm0DVwImkfGsJBnv2CHcaRePeNdC72Vv9REi8YI=
Subject key identifier: 76:C3:BE:A7:BE:52:42:1D:63:8D:50:D5:72:5D:5C:92:CE:D8:C3:7B
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 019775655A0582A24ECC4AE5588059FF595A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 0FEC
Signing time: Sun 15 Jun 2025 21:01:05 +0000
Manifest this update: Sun 15 Jun 2025 21:01:05 +0000
Manifest next update: Mon 16 Jun 2025 21:01:05 +0000
Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: kMQMrmNpa6cYlUfTQVyguZH6o0F1fr19uV1X7WaFnGM=)
2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:5a:05:82:a2:4e:cc:4a:e5:58:80:59:ff:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Jun 15 21:01:05 2025 GMT
Not After : Jun 16 21:01:05 2025 GMT
Subject: CN=76c3bea7be52421d638d50d5725d5c92ced8c37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:f1:e9:d7:a4:ea:48:ff:f5:4e:d7:2c:c0:
68:bc:89:b3:99:bc:15:b5:df:df:9f:81:c4:73:0b:
5d:ca:33:bf:f8:a2:7c:71:67:68:71:66:93:e0:33:
e4:a1:08:55:7a:5a:e4:c2:9d:3d:6e:d5:bd:bd:92:
d9:e9:1e:09:20:b5:eb:d4:4b:76:5b:82:a8:33:42:
1c:55:b7:95:7f:d6:dc:8a:12:c8:fc:38:ad:b2:a2:
f5:22:c5:60:56:24:cc:78:32:69:11:a2:df:b1:77:
7e:68:36:5c:87:bd:e3:e1:8f:f1:72:0e:84:a9:b1:
bf:5f:33:7c:95:23:ec:a1:71:f4:fb:4f:e8:a3:1a:
3a:3e:17:45:26:b6:de:01:46:e9:ed:4d:85:cd:3c:
61:c2:6f:df:23:12:24:2a:d7:94:b2:23:7a:20:8f:
9b:d0:94:6e:8f:6b:be:35:c8:e2:02:fb:00:c5:77:
03:3f:71:75:9a:74:72:8b:cd:f9:6b:54:11:41:77:
d0:6f:24:d0:22:43:1b:57:de:9e:b9:0b:a5:f1:cc:
e3:67:5e:16:12:c4:21:78:51:4d:7a:c5:d3:71:d2:
b6:5a:d7:f2:eb:af:57:3b:f4:b7:63:7d:1b:3c:8d:
af:8c:a3:48:d4:32:e7:34:d7:98:e9:94:00:28:cd:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:BE:A7:BE:52:42:1D:63:8D:50:D5:72:5D:5C:92:CE:D8:C3:7B
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:95:52:ab:49:ab:71:f8:dd:02:72:b1:01:51:ad:0d:00:
b2:dd:da:f5:56:19:90:ff:d2:77:e8:62:45:6e:42:29:ef:1e:
ae:74:18:a4:24:c0:6d:91:df:4e:d5:94:ec:53:1c:5b:bb:62:
8f:9a:bf:67:0e:ff:8c:b3:0a:2c:3c:48:ad:77:40:9a:49:79:
f6:18:1e:45:7e:e5:22:4d:e9:a3:50:e2:61:ac:f0:b2:09:c5:
74:e3:b7:2f:e3:6b:32:7d:cd:ec:4d:3a:21:43:71:3b:f2:b9:
a6:02:86:92:9a:6c:7e:52:5a:76:a2:6b:d9:e1:74:35:95:1a:
48:14:2d:a0:b3:d4:b8:5c:02:47:c9:f1:2d:6b:cc:5e:37:63:
f6:95:eb:ec:de:47:c4:05:4f:09:28:53:95:ab:2f:18:88:57:
42:2c:7f:4b:38:85:e3:60:4f:14:c4:fb:cd:d6:92:6b:7f:5d:
6a:ed:f3:af:e6:bd:89:f6:5a:5c:00:7d:45:c5:22:6e:98:d1:
28:6e:c1:d2:b9:c7:9d:d5:7a:78:90:a5:a7:eb:16:1d:b7:3b:
43:27:0d:9f:d9:08:5b:58:a9:ed:17:bd:25:30:c6:54:2e:9e:
9a:34:85:32:c9:90:ed:1e:79:aa:27:54:85:92:89:24:2c:07:
47:40:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:17:37 2025 by rpki-client