Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: Q+jzxq0I2hwE7pFTvV06NwpjfqLuu4Qds8vexKQ+dUQ=
Subject key identifier: AA:CA:EE:D2:04:56:F3:0D:E6:C3:1E:89:6D:51:69:54:0B:E3:08:CC
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01976D067E016B4BD3100EFD3FC9A8456B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:31 +0000
Manifest this update: Sat 14 Jun 2025 06:00:31 +0000
Manifest next update: Sun 15 Jun 2025 06:00:31 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: ovbH14Z6+75qeVNRoBQEzJs1anTbpx2mgtFTZMaADdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7e:01:6b:4b:d3:10:0e:fd:3f:c9:a8:45:6b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jun 14 06:00:31 2025 GMT
Not After : Jun 15 06:00:31 2025 GMT
Subject: CN=aacaeed20456f30de6c31e896d5169540be308cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:c6:12:e2:c9:4e:a0:b3:90:f5:2a:bb:39:
40:88:4c:6c:3c:ad:1f:58:c9:12:f3:00:09:09:14:
82:4d:a0:5f:35:74:7b:a1:d1:c1:b3:1a:33:35:45:
e7:52:49:d0:bf:bd:f4:69:eb:ba:47:47:4a:65:bf:
7e:5d:56:0b:58:c9:3d:61:8d:c3:cc:94:55:e5:7d:
46:94:40:fb:04:ab:0a:38:de:d1:0a:8f:50:11:2c:
67:3f:b1:75:3a:53:1e:14:32:99:5e:c4:8c:ef:9d:
5b:13:a0:28:d4:e8:a3:cb:c0:de:56:ce:fb:f0:f2:
e1:3b:78:24:37:71:08:36:83:a4:fb:92:8c:f3:48:
47:da:9b:69:62:ee:ec:eb:cd:34:97:c9:11:e4:7a:
c1:af:a7:0d:b5:95:9d:f1:49:fd:09:c2:d8:71:90:
d1:7f:b1:9a:15:73:13:df:9f:b0:53:ea:e2:90:32:
bc:b0:ec:5b:af:05:45:ab:0b:d5:7c:91:dd:a5:e2:
6e:7e:81:13:61:16:d4:4e:4b:88:19:ae:22:ec:1c:
04:47:e1:b8:8d:90:11:6c:e9:9b:ee:ae:c2:bf:0a:
b2:fa:3e:6b:2c:4e:9d:89:a3:9d:ed:99:b9:49:ff:
de:4a:16:3d:0d:2a:31:86:80:39:0f:7a:39:2d:e2:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:EE:D2:04:56:F3:0D:E6:C3:1E:89:6D:51:69:54:0B:E3:08:CC
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:41:0c:03:6d:bd:4e:9a:1d:b3:d5:53:30:41:d6:6f:59:
44:b3:9e:d3:ca:c2:70:71:66:ed:39:fc:7f:6f:fb:99:65:4d:
12:0e:4d:e5:f5:85:6b:cc:83:48:da:21:3e:74:bd:24:e4:81:
98:0b:39:70:ff:da:0f:79:db:68:90:c5:df:48:38:ee:33:51:
88:3f:c1:3e:91:7a:e3:a5:3e:6f:d3:46:6e:be:04:0f:f9:b7:
ac:0e:b4:67:c5:93:1f:49:15:d1:74:2f:f8:87:d8:9b:74:45:
43:59:5e:0e:00:18:b1:89:4f:61:6b:bb:8e:86:ec:1b:21:43:
39:7a:51:3b:05:ce:05:f2:9b:6d:b9:74:19:d6:a4:75:94:93:
87:88:b1:a6:cf:fa:9c:cb:4f:db:d2:d7:73:64:d2:fb:77:8d:
1b:df:5a:f7:59:60:9e:24:65:b1:74:b0:91:8b:0b:c6:03:60:
e9:fd:00:97:da:54:23:da:2f:26:41:07:22:fb:d1:33:ac:ea:
8c:f6:18:ff:9c:8c:e0:c5:5b:f0:fa:91:e5:66:a7:6f:53:3f:
fb:89:56:35:6a:34:03:a2:c4:6d:8a:ae:27:1b:ac:08:a1:78:
79:a3:0f:28:d9:84:97:b3:53:a1:85:77:54:cb:0a:61:d8:40:
10:96:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:09:27 2025 by rpki-client