Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: sQnsPGRjToCa1h3o5rpacaB1z5NjHsd55hHFQ0QmirE=
Subject key identifier: 08:A2:9B:9B:71:A0:FC:C1:7A:E3:EE:64:F8:0D:46:91:17:DA:31:4E
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 01976E1991DA5A7C06E10DCE0DE05D18CE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 0FF3
Signing time: Sat 14 Jun 2025 11:00:58 +0000
Manifest this update: Sat 14 Jun 2025 11:00:58 +0000
Manifest next update: Sun 15 Jun 2025 11:00:58 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: WKspBtWPmrjQ8ay0GptHkTTN8CfABBJA0oSkkUdrSvg=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:91:da:5a:7c:06:e1:0d:ce:0d:e0:5d:18:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jun 14 11:00:58 2025 GMT
Not After : Jun 15 11:00:58 2025 GMT
Subject: CN=08a29b9b71a0fcc17ae3ee64f80d469117da314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:95:cd:31:b0:28:04:c8:2d:46:aa:b7:9e:
16:8a:7f:94:62:f0:80:95:91:3c:88:f2:b5:cf:c1:
62:5c:75:63:9c:cb:71:3d:fe:33:cd:d9:1c:77:07:
85:13:fb:a8:8a:03:89:7b:95:29:13:03:d2:98:9f:
34:84:78:bd:c4:c4:9a:38:a6:82:a1:cf:57:43:f8:
40:53:7a:03:4b:f1:9f:72:eb:7d:1c:b5:89:f4:1a:
63:3e:55:2c:50:46:d1:f3:a2:f3:ce:03:51:9a:3e:
8b:16:66:82:ce:70:f0:74:77:58:ca:6b:6e:d8:8a:
88:89:ff:21:54:a4:5b:f1:d8:b2:7a:4c:40:ae:4b:
08:2d:1d:26:3f:d7:03:02:91:03:1b:5c:55:91:23:
10:41:a9:b8:8c:40:0f:6f:e3:01:5a:0f:c6:00:07:
d2:27:3a:c5:ce:68:7a:15:1f:05:74:1e:33:5c:15:
be:76:6c:74:7a:e7:dc:e7:5d:62:c4:83:6f:94:8e:
13:21:59:af:01:25:5d:56:ce:94:59:6c:7a:d4:8f:
a6:dd:93:7b:a9:c5:7d:f7:ec:53:ee:35:89:8a:87:
8c:ad:68:2e:a2:c0:ba:ea:ee:66:58:69:d2:b3:71:
67:f9:7a:07:87:13:8d:41:3a:3b:a8:65:24:c1:92:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A2:9B:9B:71:A0:FC:C1:7A:E3:EE:64:F8:0D:46:91:17:DA:31:4E
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:24:32:c8:cf:f9:2d:b4:a1:c0:43:a4:9d:b4:2d:1d:45:2c:
80:4d:64:32:d8:ca:2a:cc:8c:95:41:48:b3:0c:29:da:1b:33:
59:d7:cc:43:95:f9:65:47:9c:6c:2b:ce:61:6e:5b:d0:9d:d3:
e2:99:16:d9:11:28:47:c1:22:a1:fb:29:48:54:85:82:20:49:
62:aa:10:bc:68:4d:b4:36:d3:b9:b0:5c:e6:21:9e:99:c6:b1:
07:c8:f0:08:88:3c:f3:27:2e:4f:26:22:8e:63:2e:48:e4:79:
85:dd:89:fe:c1:8e:60:7d:0d:0f:b9:cc:a1:22:f0:e7:fc:0d:
e3:94:6d:9e:ce:1e:8e:a7:dc:0e:3c:40:c3:19:8b:05:c9:a4:
43:3f:9c:75:2d:af:1c:f8:d6:4e:1f:f2:d5:80:74:3c:1b:ef:
0d:6b:0b:02:b6:19:94:62:37:74:24:a6:21:a6:9c:6d:43:87:
6e:7f:1d:c3:e6:dd:48:d6:a5:cf:51:2f:3e:95:ce:b7:84:58:
26:30:27:99:91:34:5b:f4:71:fe:c0:16:42:62:a6:44:1f:70:
91:5e:ee:1f:e2:a8:4e:f9:b6:cd:d4:a6:4b:82:d5:d1:ae:71:
2a:7c:a2:01:93:0d:d3:72:b7:72:be:77:b0:e0:06:67:ec:7a:
b5:13:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:43 2025 by rpki-client