Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: IqDJdLJaQUdhtMf89ZXgaC0ajo6mdls+2KeXDqs35DY=
Subject key identifier: AB:A5:4E:89:1E:FA:6B:1C:ED:AF:CF:A5:C4:3E:32:86:E9:C4:BA:B1
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 01976C988C7ED678C0F5F436146E5C3865DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:26 +0000
Manifest this update: Sat 14 Jun 2025 04:00:26 +0000
Manifest next update: Sun 15 Jun 2025 04:00:26 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: vxcpVLDvJF331TaUEMB+Sarjp2Rpu4ZtBu5nJ7+zoBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8c:7e:d6:78:c0:f5:f4:36:14:6e:5c:38:65:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Jun 14 04:00:26 2025 GMT
Not After : Jun 15 04:00:26 2025 GMT
Subject: CN=aba54e891efa6b1cedafcfa5c43e3286e9c4bab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:e4:cf:35:5b:f6:01:d7:91:b1:14:5e:ef:
6b:bb:fc:4f:ae:62:c9:90:5b:ef:62:4e:c7:4a:6b:
bd:a3:03:52:a6:09:5c:18:9f:6e:28:70:e2:db:b3:
0a:e4:e9:4a:33:8e:a4:36:29:3d:24:08:5b:bd:82:
27:98:ce:f4:bd:48:de:2d:f8:26:da:e7:69:95:63:
f0:39:18:56:e6:5e:84:1f:95:53:0d:74:a4:cd:b3:
a0:fa:86:11:36:04:cf:a1:f2:77:b2:e0:b8:4f:22:
00:71:cf:0c:bb:cb:8d:5e:87:19:a5:8c:d6:ef:87:
9a:a2:48:48:7d:61:1d:ff:97:91:92:23:6c:e0:c5:
ff:ec:7b:b8:2e:fe:f5:3b:91:69:71:3a:69:ce:2c:
e2:77:06:56:29:c6:cc:af:96:de:d7:a3:19:42:be:
8a:f2:60:05:4b:45:38:29:2a:4d:5f:d8:d4:f8:f3:
7a:c7:f9:58:ed:9f:17:dd:03:a9:a1:d3:98:5c:c8:
92:f4:12:c8:47:3b:93:a5:cb:b3:c2:46:c3:8e:96:
ae:e8:1d:7f:11:cd:be:0c:94:c9:44:85:0d:45:df:
0b:0b:f3:fe:85:33:91:08:b0:8b:91:af:c7:1a:4a:
15:29:49:9f:1b:04:cd:ca:18:e3:a2:3e:ae:53:a4:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:4E:89:1E:FA:6B:1C:ED:AF:CF:A5:C4:3E:32:86:E9:C4:BA:B1
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:c9:74:14:bd:1c:33:f7:69:31:fe:64:e5:ad:e9:d8:2f:
f9:a7:ee:9f:72:8f:30:16:8b:6b:0b:1e:57:18:85:e7:78:61:
2a:3a:e7:65:e7:1f:5c:bf:34:dc:a4:f9:1f:90:dc:d8:b6:c1:
b7:1a:08:14:35:1c:3c:10:36:60:38:33:49:15:12:e4:97:70:
91:0f:19:de:ca:7e:4a:68:f6:44:67:81:3a:c7:ee:e7:32:11:
fb:b4:c6:1f:26:b9:d6:25:bf:e6:2d:ae:97:30:f2:27:25:56:
a6:f4:b5:ef:0c:dc:32:c1:05:f7:66:af:ca:55:25:c6:a3:a5:
2e:cb:fc:e0:fe:17:36:f1:93:38:89:85:52:23:51:b4:8d:5a:
8e:d8:24:eb:5e:e7:ba:a1:95:da:48:a1:df:c6:f1:02:37:6b:
5a:90:e7:bc:9b:85:1b:44:fc:17:01:64:96:27:b7:e3:84:c5:
aa:86:dd:1b:4e:b5:e3:ff:21:db:dd:2a:b9:1d:0e:d2:00:f6:
ec:d2:05:2e:0e:45:75:4c:86:d0:b7:3b:48:24:d7:79:10:85:
6f:d4:c4:7a:33:3d:ff:4c:f7:3c:ad:ac:e7:5d:5c:96:a5:30:
d3:05:82:32:2c:95:62:07:0e:fa:70:f5:0d:f1:5a:80:81:5c:
f7:df:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:23 2025 by rpki-client