Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: eBfoGm8nP4ulNwgfZDynbG9Ak919tM8fYpxXlVXGF/E=
Subject key identifier: 28:F4:B2:19:43:B5:6C:94:9B:8B:2C:36:47:9F:2A:D0:E7:D4:06:F2
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019768850A203ABA5F9AB0925D30D5D380CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 09:00:38 +0000
Manifest this update: Fri 13 Jun 2025 09:00:38 +0000
Manifest next update: Sat 14 Jun 2025 09:00:38 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: +DaoO0FslowEnsYUUwXGOiY8h+Wh1WATo/E6SeAH2e4=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:0a:20:3a:ba:5f:9a:b0:92:5d:30:d5:d3:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jun 13 09:00:38 2025 GMT
Not After : Jun 14 09:00:38 2025 GMT
Subject: CN=28f4b21943b56c949b8b2c36479f2ad0e7d406f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:29:83:d6:a6:df:08:f2:08:f6:85:d5:f5:
ad:23:0d:05:2d:26:4c:e8:43:7c:2e:6b:42:dd:74:
16:fc:f9:f3:7d:d3:18:a4:57:dc:c5:7e:71:3e:d4:
6c:5c:04:1c:3c:82:df:ab:e7:33:fb:04:f9:38:c3:
e1:8f:ac:94:9d:1e:fe:90:45:c0:60:90:5f:8b:cd:
32:fa:55:ba:2f:f9:5f:81:56:69:aa:2c:02:df:04:
40:bd:c7:ea:a5:9b:d8:01:7d:b1:28:a8:70:3a:cb:
f1:b3:10:69:a3:b7:5c:f5:51:96:98:cb:42:ff:52:
b0:df:71:71:4b:7a:ca:ae:54:45:d8:db:1e:4b:52:
ac:52:35:52:78:ae:d4:e6:df:0e:ae:d1:5c:88:67:
1a:28:d3:63:2b:ee:bf:67:c4:60:94:a2:ef:b0:ff:
34:41:3a:a1:73:ec:d2:61:41:7d:ee:cd:8a:d3:ad:
e7:86:2e:92:2b:bb:52:a9:be:84:41:02:7c:58:b1:
3f:87:26:e6:a5:55:cc:f3:49:a8:fa:2a:13:69:69:
81:3a:bb:73:58:3f:8c:41:e7:b9:df:ca:33:df:5c:
1e:1c:d9:c2:da:89:f6:c3:c9:cb:d1:c4:f6:6c:fc:
f1:db:15:46:d2:d3:d9:b7:1c:8b:df:b2:63:d3:9f:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:B2:19:43:B5:6C:94:9B:8B:2C:36:47:9F:2A:D0:E7:D4:06:F2
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:ba:a7:9c:3d:92:46:33:9b:1f:cc:4f:73:55:7e:dc:46:
c8:d3:2e:ac:dc:07:0a:3f:13:02:d5:c6:82:50:c1:24:0b:f5:
64:3c:02:bd:20:a2:75:37:9b:48:10:23:c0:05:52:43:db:de:
cf:72:ce:d2:c3:21:c7:47:ac:89:3d:ab:03:f6:d1:5a:bd:30:
02:e2:d6:e4:25:4f:5f:42:6c:c9:9b:76:81:66:1c:e8:ae:cc:
07:0f:3f:3a:bb:9a:b1:a4:01:e1:15:db:29:69:90:aa:0e:b6:
5a:37:97:a5:3a:d2:48:a6:14:57:6d:94:2a:b0:08:40:5e:1b:
14:8c:6e:a8:00:68:1b:aa:cf:e4:1e:33:b8:cb:1a:3c:5f:a5:
ae:4d:c3:79:0f:5f:91:57:1c:10:91:ef:24:de:5d:f7:9b:47:
99:4e:7f:00:82:ed:c4:68:1c:4f:8f:4e:d8:ad:cb:47:70:c9:
7e:2b:c5:f4:34:2b:15:0f:f6:de:cb:9c:48:6a:01:65:8f:8c:
95:40:7d:23:97:14:f5:e5:e2:b8:89:f5:15:e4:77:dd:ab:9f:
b1:ce:b6:e0:a6:38:ae:16:73:fb:07:57:4e:61:1d:88:ff:d4:
19:c6:c1:29:d8:0b:8b:cb:e5:ad:6b:bf:14:00:49:96:01:3c:
19:f0:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:01 2025 by rpki-client