Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: RHDlrB8aqZnUpKeayKy/dulSTZ8kkSCJd1mbBvU1COY=
Subject key identifier: 87:CE:EB:78:A3:BB:00:A8:B2:92:E3:9E:B4:BC:29:35:29:13:75:0E
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01976CCF7EC3969C1900601DED5437A8A675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 05:00:27 +0000
Manifest this update: Sat 14 Jun 2025 05:00:27 +0000
Manifest next update: Sun 15 Jun 2025 05:00:27 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: YP7rVo8oornDP1bMERSGoQTESjPJJ+lqA0vccJMHIrY=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:7e:c3:96:9c:19:00:60:1d:ed:54:37:a8:a6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jun 14 05:00:27 2025 GMT
Not After : Jun 15 05:00:27 2025 GMT
Subject: CN=87ceeb78a3bb00a8b292e39eb4bc29352913750e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:68:7c:a4:07:2c:1b:66:87:aa:e0:3e:26:
b8:ff:f8:9c:7c:b7:68:39:0d:ad:4b:68:83:ed:e5:
fe:f5:e4:51:6c:f6:76:7e:86:4d:24:43:82:b2:b1:
ba:a5:42:a0:04:74:1e:8a:1d:ad:88:4d:f2:b0:73:
99:fc:6c:8c:c9:09:c2:66:3e:a9:8a:b2:19:1b:f7:
c8:51:27:24:c8:26:ac:54:d2:b6:8e:96:ab:1f:82:
70:b7:86:b0:a0:bb:7e:41:a4:80:33:dc:2e:74:c7:
b0:5a:61:67:07:1f:26:af:fe:af:d3:72:a9:a1:2c:
91:b8:c8:60:c3:5e:9a:42:10:f9:7b:a5:c1:7c:14:
f9:10:af:60:a6:75:05:31:2c:b1:c8:f7:38:74:a0:
ed:be:7c:e8:e8:25:25:ac:92:7f:3a:f2:dd:1b:1b:
a9:b5:dc:b6:44:84:34:4f:e1:f9:5d:a5:60:a5:22:
a3:c6:92:2a:1d:45:82:50:ac:51:17:79:93:bd:7e:
14:da:22:5a:fa:b2:d4:4e:a9:95:61:93:b2:22:de:
14:4e:9b:44:5b:4c:9f:d4:ef:50:5e:0b:cd:ff:46:
0e:a1:b5:81:a0:95:ed:be:af:02:c8:9c:75:4d:08:
6f:cd:5b:b4:ba:9f:10:f8:e8:f3:86:e7:7c:d2:01:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:EB:78:A3:BB:00:A8:B2:92:E3:9E:B4:BC:29:35:29:13:75:0E
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b1:9b:c2:17:ac:62:62:08:af:d5:4d:b5:e0:65:d8:e8:18:
97:9f:58:fe:b3:8c:3b:82:77:87:26:ec:3a:56:d2:12:9e:7e:
4d:1b:54:b7:81:8a:c6:1b:65:1d:5d:54:5e:fe:58:4f:b9:5d:
60:15:47:a0:c3:2f:cc:1e:ec:2e:35:a6:33:23:2d:51:bf:79:
5f:a4:7a:ea:65:43:62:65:a2:0f:15:d2:56:f2:6b:a4:8b:51:
38:56:d2:16:db:16:70:2d:96:8b:8f:73:5b:72:0a:de:c2:3c:
2d:4b:51:75:eb:ae:12:c8:87:8a:b5:65:f0:25:e1:8a:8f:cd:
87:08:b3:28:68:44:d8:d8:48:f8:c5:47:f0:ef:a4:1d:86:bf:
33:c5:e1:ce:a4:62:db:5e:de:41:1b:08:fe:aa:fd:da:60:99:
20:d9:72:e5:32:8b:83:34:d6:d6:a8:7d:db:ef:1d:28:83:38:
18:a3:ff:bc:70:29:07:dd:38:34:05:d2:ce:48:7a:d1:35:df:
25:e3:ac:14:87:d5:b0:60:36:bd:38:9c:1b:da:79:49:21:c9:
97:7d:6e:55:bc:08:6d:b0:63:25:f1:a9:cd:e3:bf:c7:b4:cb:
20:f6:ff:a9:a8:c5:27:80:a2:21:7e:3c:39:ec:e1:14:a5:ab:
79:4c:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:56 2025 by rpki-client