Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: XOVjZbvXuC/I57NLLhZDcNDCJhXmbGXu1lD87IijuKM=
Subject key identifier: F3:91:25:58:F4:15:9A:B9:85:F6:1B:B9:27:17:81:DB:F9:D7:62:4B
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01976D068F47302D250198BA2D7EF33565F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 159E
Signing time: Sat 14 Jun 2025 06:00:35 +0000
Manifest this update: Sat 14 Jun 2025 06:00:35 +0000
Manifest next update: Sun 15 Jun 2025 06:00:35 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: JCswTCAG8jL6EGNRgxdc2Uhv8jPxDAAQx8NumTqhQv4=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:8f:47:30:2d:25:01:98:ba:2d:7e:f3:35:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jun 14 06:00:35 2025 GMT
Not After : Jun 15 06:00:35 2025 GMT
Subject: CN=f3912558f4159ab985f61bb9271781dbf9d7624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:39:06:06:29:53:13:a7:3c:5f:69:47:e1:
f9:bb:32:71:d9:a5:89:27:b9:98:de:db:50:ef:bc:
40:10:57:9f:86:ac:46:92:a5:32:69:8e:0e:5d:26:
4f:c2:24:b1:c5:93:76:23:da:61:3c:4c:0f:c3:0e:
e8:96:90:5c:c4:6d:91:da:8a:60:83:39:fa:e1:fb:
86:67:03:5d:d5:04:c5:d3:09:c3:95:7d:22:1f:07:
73:8d:b3:06:f6:bf:c6:42:cf:3d:d3:9a:5c:18:f0:
36:dd:80:09:47:8b:b2:7d:18:8f:2e:99:ff:60:33:
a9:01:40:b8:6d:97:26:bf:88:95:b5:e0:a9:75:14:
56:df:cf:2a:20:96:4e:f1:d1:7e:64:68:91:c0:12:
85:39:c5:c6:13:05:7d:63:8c:6b:04:80:0c:c3:73:
98:e6:d3:5c:8c:9b:7e:16:a1:f1:29:e8:c1:24:cf:
28:c5:24:5b:95:d2:e9:b6:46:48:dd:79:f9:f6:6c:
46:c4:64:24:f4:5f:8f:71:9a:a4:ff:a9:14:65:4c:
e5:66:d9:5d:ea:4a:64:11:bc:ff:7a:c5:0d:e2:39:
b3:03:d2:56:5c:38:51:d8:68:9a:1e:cc:ca:23:5b:
ec:33:0a:52:c0:30:90:4b:1f:f1:d3:2c:99:70:33:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:25:58:F4:15:9A:B9:85:F6:1B:B9:27:17:81:DB:F9:D7:62:4B
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:e9:ce:e3:6d:ce:67:46:01:50:4a:61:73:ae:ff:f7:30:
f3:8c:3f:2b:b8:07:72:38:34:02:ee:52:32:68:55:8f:bf:71:
c5:dd:7f:ab:ef:00:d2:d4:8d:f8:4a:a2:aa:26:81:51:26:bf:
85:f5:d5:c1:fa:e1:0c:b9:ff:9a:de:7b:d6:71:dc:09:a5:79:
b2:bb:35:b0:a4:5e:22:36:0d:df:8c:28:ff:aa:0f:31:cb:38:
e5:d8:20:57:65:e9:09:64:ff:ec:b9:f4:8e:35:4f:ff:49:a9:
7f:0b:5a:6a:7c:a6:d0:31:31:91:50:e2:43:b6:3f:d3:8b:84:
9d:79:dc:1e:27:ab:a0:63:bd:62:ab:3c:1a:d1:ac:e3:f2:1f:
2b:16:de:54:a3:75:b3:7b:74:e2:83:bc:22:6c:49:c4:a6:47:
23:8b:f6:04:79:2d:99:57:7f:aa:cf:1a:f3:b2:af:6a:d8:c2:
24:3c:65:56:18:d6:96:fa:c3:17:f3:1d:13:a6:50:f7:37:02:
45:d4:ab:b0:48:a2:c1:8c:48:f7:ed:60:c4:db:2b:70:f7:e9:
4d:8b:0c:1a:3f:ae:9d:e5:9b:74:48:85:6e:16:2d:c7:5b:74:
f0:10:41:20:da:b6:7b:12:5f:70:2e:a4:31:3d:a5:5e:fe:e6:
64:65:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:07 2025 by rpki-client