Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: kiFgvGNc4VDj9QfnvCRqzj8jfgFKMlkjqPgcf6dKCBA=
Subject key identifier: 13:AB:77:F8:44:B3:46:C3:AA:D6:0F:08:6A:60:65:41:D1:35:71:EF
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01976EBE0267C71007440F09A99EAC9440E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 14:00:35 +0000
Manifest this update: Sat 14 Jun 2025 14:00:35 +0000
Manifest next update: Sun 15 Jun 2025 14:00:35 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: fU4sNsS+8lDzs3dWiyuucNKAQnaON9NqJCuApqSPP4g=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:02:67:c7:10:07:44:0f:09:a9:9e:ac:94:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jun 14 14:00:35 2025 GMT
Not After : Jun 15 14:00:35 2025 GMT
Subject: CN=13ab77f844b346c3aad60f086a606541d13571ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:30:bb:de:95:15:cb:96:4a:55:4e:63:4d:
7b:65:a8:b5:75:b5:fe:8b:dd:9e:27:57:69:88:21:
32:a4:be:6b:12:5d:8e:2f:b7:0e:e5:48:76:83:94:
1b:60:a5:85:f8:e2:79:18:a3:5c:9a:43:df:00:60:
2c:9c:11:02:5c:d6:09:3e:d0:e4:79:6f:b9:68:de:
76:2f:3d:a9:50:7c:7a:d8:79:c0:17:ed:92:4f:f4:
5e:1b:24:da:9a:46:7f:ef:1d:5e:f2:af:84:5e:2c:
83:1c:03:f8:2a:0a:05:aa:df:49:37:25:cb:1d:95:
7f:4b:2e:2a:56:30:cc:a5:01:88:25:bb:a6:8a:ba:
9f:bf:67:82:6c:63:38:0c:3c:8f:e9:a6:65:5a:b6:
84:eb:68:63:fa:a3:6c:be:01:92:10:a5:3a:a1:1e:
e0:aa:6d:56:bf:f1:7f:8f:e7:ca:8d:67:93:d8:88:
31:6d:bf:31:81:30:cd:1b:03:8b:23:16:e9:cf:4b:
6e:31:c1:71:07:f9:6e:c1:61:92:1f:82:78:d2:1b:
13:bb:c4:e0:27:11:2d:d2:8b:7c:01:e2:1b:32:f5:
8c:f6:92:2f:47:13:8b:c0:d9:10:60:eb:02:1e:e6:
14:33:c6:66:b0:ad:07:7e:63:b9:2d:36:a8:c6:89:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:77:F8:44:B3:46:C3:AA:D6:0F:08:6A:60:65:41:D1:35:71:EF
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c3:03:67:20:b2:f7:4d:69:e5:78:ac:a0:4d:29:00:3b:8e:
2e:6d:89:73:14:6c:66:4b:23:a7:27:81:53:5f:3f:70:d2:1f:
97:54:56:1e:d8:b6:2b:f3:65:8a:66:b6:7c:60:ea:66:5b:46:
3e:70:2f:96:5b:57:f9:13:63:51:59:e8:a7:ae:31:d7:bd:e1:
03:84:ad:53:5a:67:d1:fc:d3:51:54:f3:ac:96:39:10:a8:08:
8b:68:a0:2c:bc:bf:ca:c8:98:88:20:1a:02:fc:7d:17:0b:1d:
14:ab:a7:f3:ba:45:45:72:49:ae:57:1b:d0:3f:74:f9:ec:d0:
09:ed:aa:52:ca:38:95:f3:61:54:f4:4e:94:dd:49:9a:80:e9:
f2:b3:88:51:8a:2c:03:7d:be:3b:08:ea:d0:e0:71:a4:50:fd:
63:72:67:2b:fa:2c:53:18:a0:3b:43:35:91:f6:ed:ed:2c:8d:
da:e9:ff:ce:aa:bb:38:3a:89:85:3f:80:58:b1:c9:d6:9f:14:
7b:23:7e:c3:e8:05:c2:28:1d:f3:bd:fa:bc:fe:42:29:14:df:
27:b9:ce:f6:23:32:9a:22:8d:1e:91:9b:92:de:08:4f:26:56:
ad:01:8a:0e:c0:e5:3e:f9:70:bb:b5:09:8d:7a:ea:7f:f1:8c:
cb:c5:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:46 2025 by rpki-client