Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: Nr+ZepEq/e94yl5acVe7rgokCBwQzh5a2NjiO1ubcho=
Subject key identifier: E8:28:25:04:E3:34:CF:08:7B:F3:3E:0F:F9:6F:36:FD:49:27:4E:39
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01974B1F82043937AFBB3E0D6D4B2EE8BA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0378
Signing time: Sat 07 Jun 2025 16:00:45 +0000
Manifest this update: Sat 07 Jun 2025 16:00:45 +0000
Manifest next update: Sun 08 Jun 2025 16:00:45 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: PZs1N0TsGNbh4JbA5/uKO8j4iXkw2z6DocpyNOOOdTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:82:04:39:37:af:bb:3e:0d:6d:4b:2e:e8:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jun 7 16:00:45 2025 GMT
Not After : Jun 8 16:00:45 2025 GMT
Subject: CN=e8282504e334cf087bf33e0ff96f36fd49274e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:ac:8e:8e:72:7e:9e:1d:5d:ad:7e:9e:91:
ef:ff:80:54:97:d1:ce:09:de:c8:de:41:75:e6:78:
83:71:d1:6b:e2:46:53:ba:4d:ec:40:37:86:8a:af:
1d:87:41:5d:fd:ca:50:81:29:46:30:d3:a9:b9:00:
f2:63:64:8f:47:76:7d:87:97:72:0b:89:ba:fc:29:
e6:5d:90:f3:4f:c7:88:97:58:d0:f8:35:dc:df:b2:
0e:77:ee:30:67:2b:76:63:18:35:76:8f:b1:6b:be:
fc:1f:97:e6:45:5b:9b:61:c2:16:34:e4:d4:42:b3:
7d:ec:cb:e6:37:80:b8:fb:ff:bb:28:83:98:42:af:
93:31:7a:36:21:42:2f:54:c8:2b:46:ad:a7:43:ca:
c5:46:1a:6a:b5:a1:ef:80:52:ce:78:32:9d:4a:fa:
d8:cd:ea:5b:b1:ed:62:45:47:b3:f7:52:90:59:b1:
59:70:cc:8a:c9:20:e9:c6:2e:77:41:7f:fa:31:18:
55:6a:7c:68:44:5c:98:44:f5:a8:0e:6c:95:9a:49:
ba:cd:f3:d5:68:cc:5c:62:ef:f7:59:ee:bd:a1:ce:
01:c7:30:6d:3f:fd:c3:ee:85:c8:b3:6f:92:c1:47:
60:8b:b6:1e:29:5c:1c:93:4c:03:b5:01:97:0f:95:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:25:04:E3:34:CF:08:7B:F3:3E:0F:F9:6F:36:FD:49:27:4E:39
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:8f:2f:c7:11:76:42:5d:1a:82:04:b0:6e:a1:76:04:01:
2c:42:6f:3d:25:bc:3e:25:e4:7f:70:db:9c:a8:67:3f:81:3d:
40:ff:a6:19:7e:02:33:96:81:39:e9:cd:94:f3:61:c5:4c:ce:
dc:1f:02:25:f7:b6:f4:7b:c3:1f:dc:0e:9c:5c:73:b9:8e:4b:
86:d5:1c:06:4d:c4:8e:8f:58:74:a7:ea:49:6b:35:69:81:ee:
b5:40:f1:d0:71:f1:46:28:f2:ec:e7:3a:4a:d8:09:c7:3d:06:
8c:3f:71:78:00:58:21:02:c8:e2:6a:0c:bb:be:d9:8a:50:09:
6c:cd:59:6c:0a:50:a0:fc:2d:6a:f8:9b:aa:e3:83:7f:c7:ab:
98:fe:29:4e:3a:2e:f1:a4:e9:42:77:f0:18:28:3f:31:09:7f:
ab:e8:d0:8c:79:d2:1a:c4:7e:64:66:1d:2b:fa:49:21:b8:0c:
48:3b:54:fc:7c:85:f0:07:67:97:1e:2b:7e:c2:b9:42:69:06:
33:3d:85:88:a9:30:af:e9:be:68:8f:dc:f2:24:90:ae:06:55:
d6:c5:ac:aa:ac:d6:23:b8:aa:e8:19:78:0a:ba:98:fd:04:6f:
b8:0a:5e:b4:60:8e:42:e3:a3:83:fa:a4:50:92:51:8d:08:35:
a4:fe:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:00 2025 by rpki-client