Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: lKJ+qsAz0n38FEAuq0HlqzE+0mwJZP+nmnrBMRFpcCU=
Subject key identifier: 40:4A:B3:60:FC:DC:0E:14:99:CA:CC:B5:1D:FF:28:63:51:02:0E:97
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01974D7BF9C28EF5D9C18F09B15EF01A4C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:00:59 +0000
Manifest this update: Sun 08 Jun 2025 03:00:59 +0000
Manifest next update: Mon 09 Jun 2025 03:00:59 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: MIxTd/E9f6ox7Maj6tMxso4KMo5eatmLa9p0x+hbSQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:f9:c2:8e:f5:d9:c1:8f:09:b1:5e:f0:1a:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jun 8 03:00:59 2025 GMT
Not After : Jun 9 03:00:59 2025 GMT
Subject: CN=404ab360fcdc0e1499caccb51dff286351020e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:c8:76:85:eb:12:31:86:92:65:b1:ca:51:
88:22:84:86:ce:b9:e0:08:f6:2e:bd:c5:5f:04:33:
40:19:d4:69:e3:59:1b:42:58:86:d5:6d:1c:13:dd:
89:bd:cf:cc:57:3f:e5:98:a4:47:0d:68:b6:e4:ce:
b8:46:b7:7f:0e:ab:26:5b:33:d6:8f:61:f0:d4:47:
8a:4d:d9:04:e5:81:17:95:90:6b:af:28:f6:fb:92:
ac:f3:9c:ff:06:6c:e8:07:a6:eb:ec:ba:74:ff:fc:
71:db:aa:88:08:69:14:40:62:bf:ce:0b:1a:d8:98:
18:1b:0f:08:ec:5d:96:17:8e:62:7b:33:98:c5:08:
b3:5f:e1:b8:13:f3:a3:3d:02:23:29:18:ee:14:a1:
76:9b:50:7c:b1:9f:38:64:d5:7c:c4:ba:bf:48:04:
ee:9a:bb:27:0b:b9:25:2e:29:63:ef:bd:66:40:70:
7b:a5:5d:4c:2c:e8:3b:4d:67:63:da:e6:97:5a:02:
b7:c1:26:78:9a:1a:f5:5a:50:c2:24:e6:ef:1a:e2:
c0:f5:e6:5d:5d:82:77:48:c5:2f:0f:3e:3c:55:ad:
d6:6a:35:03:98:e0:c1:bd:f3:86:bc:63:92:2b:3e:
55:41:1e:fa:83:fe:88:c0:a2:1b:73:ed:a8:b4:7a:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:B3:60:FC:DC:0E:14:99:CA:CC:B5:1D:FF:28:63:51:02:0E:97
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:06:5f:15:a0:6a:b0:ba:30:d0:5b:9b:28:98:7e:36:7b:10:
12:9c:c0:c5:8c:6f:53:64:48:47:84:e9:b7:9d:b3:11:3c:57:
65:d0:54:e4:b1:71:e0:67:3c:d9:7a:6a:ee:15:63:f7:8e:24:
7a:79:19:a0:60:f3:3c:51:2b:86:da:ca:79:49:20:5d:6d:53:
70:2a:a7:55:cd:c9:4e:32:85:45:de:b5:b6:77:06:54:85:a8:
cd:f9:04:70:e8:a6:11:4c:e1:c0:41:10:7f:bc:c3:23:a7:2a:
b3:09:45:e4:40:97:38:67:fc:e8:9a:2d:3a:e0:f3:9e:50:3a:
64:19:29:87:b5:4d:b0:2c:5a:6b:96:f4:7e:d5:fb:58:27:2e:
69:c8:83:7d:7c:b3:d7:49:57:a5:e9:31:7d:09:86:8f:97:39:
3e:37:b1:23:60:4e:dd:ab:4f:e8:53:a7:df:05:b5:0b:23:02:
c8:59:8a:f2:bd:1f:62:df:d5:6a:d4:18:c2:6f:ce:9f:db:6f:
e6:09:c0:48:b3:d6:19:5d:b4:20:81:2e:fb:1b:4f:8c:86:75:
7e:4f:a7:46:b1:1d:5b:ef:be:73:28:f9:11:e7:53:28:8d:5e:
f8:58:97:74:3a:3d:b7:4e:e0:d6:0d:f0:b1:32:3e:d3:db:ce:
7d:46:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:19 2025 by rpki-client