Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: vj/929/UZWnFcyf0+5mBQHvOXsYjO2x9HhCXg2ME+kU=
Subject key identifier: 32:1C:07:0B:30:29:30:B5:78:16:C8:E6:80:AC:45:27:E5:71:CB:DB
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 019748C34B46DDE133579BFE4DD9A8B1F592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 04DB
Signing time: Sat 07 Jun 2025 05:00:47 +0000
Manifest this update: Sat 07 Jun 2025 05:00:47 +0000
Manifest next update: Sun 08 Jun 2025 05:00:47 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: 2LmLDSHQ8QnVePwevKnaPDalO2No0tUs8jORcWiwNwM=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4b:46:dd:e1:33:57:9b:fe:4d:d9:a8:b1:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Jun 7 05:00:47 2025 GMT
Not After : Jun 8 05:00:47 2025 GMT
Subject: CN=321c070b302930b57816c8e680ac4527e571cbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:21:8e:9c:7a:1e:75:8f:f6:b5:11:ab:c7:
60:ad:2c:fd:63:c0:a4:13:4d:d2:23:87:a2:e0:37:
53:35:e0:99:ae:8e:f8:5e:e6:00:f4:9a:4e:24:6d:
d1:a3:1c:b3:ac:a2:02:46:bf:6c:06:a1:0e:92:12:
b7:39:c9:da:12:ad:16:57:bc:69:30:00:1a:33:75:
c4:90:52:25:ed:fd:aa:16:9c:f6:94:12:1b:f4:2e:
2a:3c:79:17:78:2e:c4:9f:55:2f:52:bd:c3:d4:a9:
2c:cb:00:b1:25:8b:6f:f9:df:90:33:97:c5:2a:fa:
aa:77:b8:5d:bd:ad:3a:85:80:da:c0:a6:48:1f:2c:
01:e0:b9:42:49:e3:a7:59:21:79:ac:7c:57:f4:4b:
0d:09:3c:54:4e:04:4e:ca:0e:51:5c:32:71:74:69:
53:e9:5a:5f:8c:da:e3:13:46:bb:c8:df:14:ee:e8:
af:d9:27:c0:83:31:e7:9f:e8:c5:60:21:95:0c:a1:
6a:4f:f9:a0:30:24:6a:2d:13:ed:9e:75:60:a2:f2:
5e:2a:64:a8:de:2b:3e:b2:4d:c2:4b:71:fe:a9:f9:
2b:27:a6:9d:86:78:57:aa:c2:33:57:34:ae:df:e9:
56:f8:33:19:38:eb:76:d7:3e:94:5a:5d:8e:8e:45:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:07:0B:30:29:30:B5:78:16:C8:E6:80:AC:45:27:E5:71:CB:DB
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:9c:91:00:ec:61:b6:95:13:30:f7:dc:2e:f0:af:9e:87:
e6:86:ba:2e:37:19:2a:64:09:3d:fb:0e:31:b7:32:d0:f2:52:
30:5e:76:43:92:03:11:43:d3:0f:e1:49:27:0e:1a:d9:e5:c4:
26:ac:25:d5:a0:e9:af:51:68:ea:02:94:ee:2b:1f:9e:63:62:
63:05:d8:b4:0d:a6:41:98:85:0d:2d:49:e7:1c:5d:3e:fa:8f:
f9:93:c0:22:48:36:9d:17:b2:8f:c8:c9:1f:ed:52:a1:59:62:
8e:95:1d:2b:a0:a8:e3:d1:67:e3:87:c1:ce:e5:31:f3:8c:ee:
e0:51:21:22:06:9f:ed:d4:7f:d1:03:2f:bf:bd:8a:28:06:42:
d6:bf:43:4b:ac:88:fe:c8:0e:ae:8b:41:0f:72:87:67:e7:bf:
8f:3c:05:16:ff:22:3a:9e:9e:0a:d0:37:ab:f6:c2:1e:8e:50:
b6:ae:c2:9c:9f:fe:15:56:cc:4b:c3:04:4c:07:67:7a:d1:a8:
4d:9e:27:55:9b:7a:15:5f:58:72:ec:a9:c6:7c:10:c3:b4:38:
ca:ab:d9:cd:0b:87:17:82:76:db:e8:1d:7a:35:12:fd:66:09:
0b:a3:ee:2e:ac:12:c4:aa:82:91:4d:54:d0:65:d4:2f:aa:94:
11:31:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:23 2025 by rpki-client