
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: S/xnFQ7Qfu95S3zmpMCu/vOagd4l8nkI/T5u4hxBZC4=
Subject key identifier: B5:82:FF:51:FD:C2:54:DF:D6:96:03:AB:E8:CD:BA:7F:B3:05:52:D3
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 01974B5661EE6406232E52D7A3A7F0CDE1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:00:41 +0000
Manifest this update: Sat 07 Jun 2025 17:00:41 +0000
Manifest next update: Sun 08 Jun 2025 17:00:41 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: KDinjkDmZ/lcinsyOkJRWgloWyF7u6HDbjGD3BoxbfM=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:61:ee:64:06:23:2e:52:d7:a3:a7:f0:cd:e1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Jun 7 17:00:41 2025 GMT
Not After : Jun 8 17:00:41 2025 GMT
Subject: CN=b582ff51fdc254dfd69603abe8cdba7fb30552d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:65:96:95:fc:16:93:54:0d:d1:6b:85:ef:
19:ae:4b:4f:75:31:50:7e:cd:96:30:e5:0d:4f:18:
80:48:a0:e4:c9:55:90:a6:45:1f:95:ea:d2:ec:87:
3a:82:0b:cb:8f:fb:55:00:97:e4:ec:72:b7:36:6d:
e1:58:75:7d:8b:82:1c:3b:2f:ed:30:90:18:ad:f0:
c8:fe:cb:84:e2:e9:88:63:3b:70:b7:45:48:45:d2:
bc:11:01:34:78:1a:ad:44:fe:97:da:ee:77:b9:92:
2a:34:72:1b:fa:30:2d:d9:ad:12:9a:c7:cb:ad:f9:
54:d4:8b:b3:17:54:e6:fd:9a:d3:3e:19:6c:f0:82:
89:09:30:1c:f6:34:cc:f9:54:b6:23:a5:c3:e9:c0:
94:48:3b:d1:b6:13:f8:56:aa:6d:bc:fb:69:55:4d:
a1:32:14:a6:10:48:77:2b:b7:b0:2a:47:1e:1b:3e:
88:10:a4:cd:c3:4d:39:c2:b8:62:7e:6b:2e:25:8a:
40:04:85:3a:6d:b0:ea:3c:bd:a3:d6:bb:fe:e2:b2:
3b:0d:15:d9:24:a7:bb:04:2b:b7:66:2b:5c:0f:11:
c9:8b:87:48:23:de:72:ac:ae:a9:fa:4e:8c:96:fd:
cb:54:56:f2:77:13:fc:cc:01:10:3f:0c:19:9c:70:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:FF:51:FD:C2:54:DF:D6:96:03:AB:E8:CD:BA:7F:B3:05:52:D3
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8b:92:32:66:25:52:c4:9e:e5:58:b8:79:dc:36:d2:36:01:
1a:87:0a:ca:b6:bb:51:71:95:13:eb:6a:4e:5d:93:6f:cf:b9:
e5:4f:b7:99:3c:41:c9:0c:35:31:74:db:3a:0f:92:a9:e6:f6:
48:88:4d:86:43:70:fa:6a:23:f0:90:81:ef:e8:92:e9:21:54:
78:98:ea:ce:92:76:2b:34:e0:8c:3f:1c:ff:98:63:08:7c:a1:
25:76:29:7a:86:36:47:19:28:02:e7:c4:9d:68:8a:ed:7d:05:
60:9c:c9:57:e7:b3:91:0b:4e:85:80:0f:32:91:29:de:cd:aa:
65:04:99:ab:37:6b:f9:32:89:79:39:dc:46:1d:1e:77:e2:66:
93:20:fa:a6:e1:c5:26:a8:3c:2d:6b:5b:19:3e:9e:4d:1b:11:
40:fe:38:9e:bd:97:97:fc:a7:b4:fd:88:ae:83:06:45:df:37:
08:01:c6:4f:4f:d1:0f:32:cb:dc:99:8c:ce:02:19:16:b6:81:
c7:67:5f:a9:cd:3b:5d:db:a7:be:85:b8:e8:50:59:f8:2d:d8:
33:cc:5d:6e:d0:5d:28:07:1e:de:24:29:47:21:16:78:a8:83:
83:c9:44:b7:00:f9:1d:60:75:2e:94:2b:d8:f7:b0:fa:50:bd:
ef:58:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:05 2025 by rpki-client