Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: bH4fIfcoN5i5LGXAK7idIkaMTAqdWfFDRiNvgbSXumg=
Subject key identifier: AE:72:BB:92:6C:6A:10:AE:3E:8A:7D:8E:FF:7A:13:60:23:13:57:07
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019768F2A990159B3C594B526159C0A64DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 0455
Signing time: Fri 13 Jun 2025 11:00:22 +0000
Manifest this update: Fri 13 Jun 2025 11:00:22 +0000
Manifest next update: Sat 14 Jun 2025 11:00:22 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: ln/twieB8IvpFqMYDRdcZ7Yq+A6vdQjsRuDbPMB7gyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a9:90:15:9b:3c:59:4b:52:61:59:c0:a6:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Jun 13 11:00:22 2025 GMT
Not After : Jun 14 11:00:22 2025 GMT
Subject: CN=ae72bb926c6a10ae3e8a7d8eff7a136023135707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1a:5b:3f:62:24:1e:2d:43:e7:30:1f:82:f2:
d5:3b:65:b6:a4:6e:bd:7c:55:b5:12:80:ca:58:81:
a1:8d:73:29:86:5a:40:9a:2c:fc:52:67:37:f3:45:
a7:a5:a9:5a:99:04:c7:7a:f9:0f:38:5b:7b:2e:94:
13:fc:5c:fd:85:68:37:05:22:7e:99:70:6d:57:50:
bd:ab:77:c6:b0:e7:ff:0d:65:66:0f:1f:82:c6:77:
8b:87:1e:c8:9e:66:76:f6:cf:42:60:d5:48:59:10:
6e:83:7d:09:4e:d6:85:6a:21:1e:86:fa:8e:1f:1e:
8f:5e:ea:d1:0e:56:62:ea:f9:d9:37:49:94:4c:67:
9c:ef:56:cb:e1:7c:65:47:18:e2:dc:9e:cd:c2:ec:
f9:74:75:7e:d1:02:ca:69:60:ed:37:2a:2a:48:4c:
a4:9f:3c:cc:cf:60:28:ea:d0:58:97:90:33:41:e2:
76:a0:f1:3b:86:8a:a9:43:55:67:76:e7:a4:7c:9d:
af:bb:6d:0c:67:dd:a6:bf:a9:4b:ae:38:a1:da:6d:
84:1a:9c:32:47:f6:67:dc:72:56:4c:eb:d1:29:80:
40:23:69:23:52:f0:ae:a4:7c:29:96:16:41:54:2d:
44:fb:88:32:3a:35:1b:eb:57:97:08:3f:c2:c4:4a:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:BB:92:6C:6A:10:AE:3E:8A:7D:8E:FF:7A:13:60:23:13:57:07
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:74:95:a9:17:a7:9b:18:17:ed:fc:ab:b8:54:aa:cf:6c:
ad:8b:4c:6c:cd:23:f3:a5:cd:15:cb:03:64:78:d4:49:34:07:
07:83:89:a7:e4:80:d0:6b:c7:39:a4:bf:a4:2b:df:76:85:08:
44:cd:bd:6a:11:eb:52:29:74:32:2c:a7:4a:a3:46:28:b2:f2:
c2:46:98:cf:d8:c8:ea:86:57:0e:47:1c:83:b9:2d:d0:57:e3:
c8:d9:60:5f:f0:e3:bc:ab:70:8f:8d:bb:46:ff:d2:92:42:47:
0d:f4:4a:51:db:31:cd:7e:91:c7:62:ab:ae:75:37:93:55:23:
f8:0d:09:90:2c:89:fd:03:5c:d9:97:62:e6:66:3c:64:4c:1c:
fa:08:97:2b:20:9c:8d:84:c1:aa:5f:58:5e:39:a8:62:53:ce:
01:9b:1c:ee:37:fe:c0:41:be:13:65:75:77:b6:71:8a:bb:19:
7d:c1:eb:f0:20:1e:bf:0f:21:34:24:73:cd:c0:ca:14:83:7e:
6d:45:ac:00:f0:fe:99:6e:dc:cf:c7:5d:38:29:10:de:77:c8:
81:6d:1a:39:02:4c:20:7d:22:4c:97:17:1f:80:be:1f:2b:b4:
69:a8:f5:26:6b:c8:97:93:ff:af:96:3a:01:8d:de:ef:51:98:
f6:85:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:57 2025 by rpki-client