Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: 4pWMfwQ5Xu+1Td+nJtLzN78dRb2lb+Hz0ZSl7NEU26c=
Subject key identifier: 1E:BB:2E:21:F5:B4:51:26:CA:1D:60:0C:A1:BB:AD:3D:D2:66:F9:9D
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 01976DABDFE04BA9559A8023ECB00B862547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 15A8
Signing time: Sat 14 Jun 2025 09:01:09 +0000
Manifest this update: Sat 14 Jun 2025 09:01:09 +0000
Manifest next update: Sun 15 Jun 2025 09:01:09 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
4: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (hash: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=)
5: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: hwTGvrgWc/tMI70P3CouE4s6yAQuqEp9Mcbhf67+Qc8=)
6: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
7: h1tX918Ru7wMIHZ954P0v306Xyg.roa (hash: Zg0OUrwbI/zN84U1nYJmwSF5Cq40+ooxa0FqsV8xXqQ=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:df:e0:4b:a9:55:9a:80:23:ec:b0:0b:86:25:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jun 14 09:01:09 2025 GMT
Not After : Jun 15 09:01:09 2025 GMT
Subject: CN=1ebb2e21f5b45126ca1d600ca1bbad3dd266f99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:bc:a8:f2:1f:60:3c:0f:35:b6:bd:d9:0c:
86:55:17:5d:75:f4:ad:17:2c:2c:ff:68:43:7a:c3:
e4:c2:01:7a:1e:e4:ae:4c:7f:5c:4f:db:dd:6f:e2:
8a:c8:5f:a0:90:e0:c8:e4:b0:b9:be:97:47:d0:45:
ab:fc:a2:17:58:7d:cb:7e:da:19:4a:7b:94:c8:55:
e6:c3:18:e9:67:e9:f6:fc:81:87:1d:a6:71:7f:df:
a8:8f:cd:0c:0d:fc:72:b5:cd:b2:eb:fb:4d:73:9b:
74:1a:b2:90:9d:a6:a8:d9:2e:2e:d0:8e:0b:fd:5d:
6e:cd:b8:51:51:f6:65:a4:28:29:b9:e3:1f:77:01:
f8:ff:96:00:3b:5a:39:ed:c4:76:4d:e6:2c:35:e6:
a0:6e:da:7c:3e:f6:5c:ba:b8:a2:0d:e2:b5:3a:92:
39:53:88:6e:ec:9b:38:d2:fb:91:ee:fb:f3:ac:89:
13:79:6e:5a:e6:0e:11:3c:9c:49:a0:e2:6e:d8:65:
4d:29:c2:c3:e9:dd:7e:aa:59:a0:28:28:e9:6a:05:
76:5f:6a:3e:28:42:ea:f5:31:da:eb:cb:38:b5:4a:
11:01:65:d0:0e:0b:40:bc:3f:91:84:95:4c:b6:63:
6a:87:f5:a6:29:a6:07:80:42:d5:c8:1c:ab:6e:15:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:2E:21:F5:B4:51:26:CA:1D:60:0C:A1:BB:AD:3D:D2:66:F9:9D
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ee:41:c0:47:3a:aa:10:67:08:cc:99:02:cb:81:0b:c1:69:
93:89:37:25:5b:5f:e9:42:8d:55:1c:1f:de:a6:19:52:03:e1:
16:c2:89:f5:9b:87:b6:79:ad:a6:cb:c1:05:0f:1a:97:87:27:
05:73:fd:87:f6:12:9c:67:e9:e4:20:df:3c:0b:3f:06:b1:1b:
ae:4b:fe:29:a8:f7:18:da:9d:f4:1c:91:6e:e3:65:90:8b:ed:
52:7c:90:f9:8e:69:0d:11:14:9b:ca:8e:1a:59:5e:59:47:13:
44:10:92:ed:e0:15:49:46:3b:03:2e:0e:bc:8d:e0:0f:5d:a3:
08:d7:ff:71:c7:39:c7:00:84:95:5e:62:c3:1c:0c:3a:3e:62:
0f:61:53:da:b8:bd:c5:27:28:c7:7b:84:db:a9:43:8f:54:46:
9e:d7:a5:08:a5:d0:24:f6:a1:cd:68:4c:d0:e0:db:30:d4:2c:
a1:85:ea:d8:78:cb:6f:c2:7b:51:13:c9:b6:e3:09:7d:75:f0:
98:45:a5:37:4e:87:fd:2b:3f:94:c7:c0:d5:c7:72:19:5d:dd:
a8:34:2b:b4:ef:22:32:1e:71:e5:a5:6a:d8:f6:1c:90:ed:37:
2a:ff:c7:8e:e3:c1:a5:e9:88:74:4e:78:10:6e:1b:d0:08:4f:
2b:ba:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:45 2025 by rpki-client