Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: E9IpwyL6B7dtdiKF59nuhDAvoqp8j8VjO6ECi8eA5E4=
Subject key identifier: 77:E1:49:D4:6E:6D:4A:0E:3D:CF:CC:1A:61:BA:83:08:70:DD:CC:EF
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01974A7B81E6B324D84609E7A2CBD80EC127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 09A2
Signing time: Sat 07 Jun 2025 13:01:37 +0000
Manifest this update: Sat 07 Jun 2025 13:01:37 +0000
Manifest next update: Sun 08 Jun 2025 13:01:37 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: 8c3ZZLZ9CLz1ZTiaXESahjRA5L2tA96MgjsQnPYJtPU=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:81:e6:b3:24:d8:46:09:e7:a2:cb:d8:0e:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jun 7 13:01:37 2025 GMT
Not After : Jun 8 13:01:37 2025 GMT
Subject: CN=77e149d46e6d4a0e3dcfcc1a61ba830870ddccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:77:e3:5f:21:d2:30:62:51:c2:4e:32:66:
cd:ec:12:02:d2:12:c1:bf:b2:ae:3b:d0:43:f0:10:
d8:af:1e:46:d5:a9:75:c0:65:53:b3:a8:cf:98:34:
15:85:f7:85:71:88:3a:2b:f2:7e:0f:1d:18:42:82:
0b:f9:a7:91:71:d2:a6:a4:b4:62:b9:2a:00:bc:6e:
ad:e7:78:05:f2:cb:b0:fc:e9:50:3a:54:96:22:99:
46:a4:bd:41:31:8f:84:34:a7:c3:ed:a5:03:56:fa:
76:f4:49:51:af:30:c3:f4:6b:92:d0:cd:cb:fe:d0:
b5:70:6a:ac:44:86:b6:9f:d0:e2:a6:3c:87:90:6c:
1b:97:27:cf:f2:20:92:7a:fc:89:6b:d9:4d:94:df:
02:27:5e:9f:3c:1f:3d:14:c3:e1:4b:09:3d:c8:3c:
9e:9e:46:39:92:e0:69:66:56:b7:d9:e0:3e:8e:55:
6d:f5:53:e8:43:61:91:3c:22:e0:0f:5f:cf:95:a5:
9e:6f:58:a8:93:40:94:df:ea:30:4c:2d:f5:43:e8:
3a:ab:c0:ad:ab:29:49:13:64:1a:fb:89:66:80:71:
e2:80:35:3b:a9:19:53:36:c3:e6:a2:71:0f:d5:eb:
0a:d6:f0:fc:7d:5e:25:e3:f9:5c:be:f7:cc:1b:df:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:49:D4:6E:6D:4A:0E:3D:CF:CC:1A:61:BA:83:08:70:DD:CC:EF
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:b8:a7:24:e3:a7:6c:ce:6e:ce:d7:28:2e:38:01:68:76:
52:aa:fb:8a:cb:a3:eb:ac:08:5c:d1:39:cb:50:90:3f:ce:c7:
b6:4b:df:8b:79:63:61:c4:a4:fc:c6:1d:1c:c7:8f:32:70:3a:
c4:7e:9d:0c:72:c9:5d:25:a5:a2:7b:ca:43:3f:ee:e3:ec:3f:
08:e7:66:1b:8a:42:17:96:cd:fc:f0:49:9e:53:67:40:e9:20:
e1:ed:60:35:96:2e:5d:fe:9c:99:3a:1c:3c:1d:de:f6:b9:c5:
c4:9f:1f:bc:de:c7:9c:a8:00:36:2d:f0:38:fc:e6:ed:d9:e5:
13:60:4d:3f:2a:aa:fe:2e:c1:42:62:fb:64:58:93:33:59:f2:
fa:89:77:17:bb:ea:9e:79:da:0a:d3:bd:bc:1b:1d:93:f6:b2:
90:39:e5:ea:21:bf:01:27:40:f8:81:fa:34:26:c0:9e:83:a5:
82:81:62:3c:40:b6:8c:2c:cc:45:0e:40:fd:80:b1:52:38:1f:
17:32:bd:a8:43:84:a1:4a:4e:52:f6:29:89:47:dd:4d:1e:25:
14:59:80:45:cb:ea:fe:e5:f2:42:6d:52:1e:84:f8:4f:db:a4:
40:91:6e:1d:24:5a:7b:82:fd:a2:b4:e9:86:e6:f2:f7:40:b6:
ac:64:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:24 2025 by rpki-client