Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: HsbDziTyQKk84cBNEKHabC1MUcpBfj1QdEs9hYsS9Bw=
Subject key identifier: E8:D4:77:07:39:8C:4A:A5:D5:3D:D7:DA:66:C9:5D:C4:47:FA:0A:59
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0197654CFEDBB424D6BF049304D550AADF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 158E
Signing time: Thu 12 Jun 2025 18:00:34 +0000
Manifest this update: Thu 12 Jun 2025 18:00:34 +0000
Manifest next update: Fri 13 Jun 2025 18:00:34 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 1nM8u+M2WbT/vWjD0DwS34xeOb1p+tczTWMC/jHt5L0=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:fe:db:b4:24:d6:bf:04:93:04:d5:50:aa:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 12 18:00:34 2025 GMT
Not After : Jun 13 18:00:34 2025 GMT
Subject: CN=e8d47707398c4aa5d53dd7da66c95dc447fa0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:fc:6d:b5:cc:b9:f1:6f:d9:10:7e:20:3c:
c7:6c:a1:12:cc:71:58:35:d7:dc:8e:90:3c:c3:82:
89:ad:8d:f6:24:d4:a9:c7:fa:25:bf:df:44:8c:ed:
cd:6c:cb:8c:f9:72:ee:8c:49:24:f3:e6:11:15:cc:
24:ba:72:f8:a5:7f:a5:5d:20:33:ff:ee:1d:a6:48:
f9:cd:51:e4:52:7d:f6:45:46:83:f9:44:02:a5:3d:
80:cb:9b:2f:0c:80:2e:dc:7d:e2:cf:ba:4d:d6:fb:
d4:be:60:0c:fc:f0:99:b0:fc:9c:12:69:f3:5c:46:
21:e3:83:a1:47:59:40:da:4a:af:28:43:3f:1c:3b:
b3:77:c8:70:88:46:87:05:47:2a:9c:93:34:15:a1:
a0:f9:67:ff:98:00:75:35:3a:13:78:4e:ad:72:0a:
5e:c7:5d:1f:b5:73:2d:74:6b:40:6a:b8:1f:18:17:
3d:84:60:67:a5:24:50:63:48:2d:e7:87:b8:15:46:
98:e7:b9:8a:fe:8b:e2:d1:d0:cc:14:93:89:8b:74:
df:e5:f0:51:30:0e:d2:7c:f3:9c:7e:0e:09:a4:3b:
a9:15:0f:92:6c:4a:b5:5a:d2:1f:e4:f8:80:d1:fe:
14:a6:e9:61:78:5a:7b:7b:3c:6e:06:8b:b8:c3:d5:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:77:07:39:8C:4A:A5:D5:3D:D7:DA:66:C9:5D:C4:47:FA:0A:59
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8c:f7:c7:14:8e:0f:5b:a4:e3:70:41:c1:6c:74:a3:71:96:
91:78:fb:8d:f9:aa:36:00:2a:2c:1e:33:fd:38:1d:6e:df:30:
5b:a6:9b:e5:a5:a1:72:95:c7:a2:08:7d:f5:0a:a8:23:bf:bf:
4e:47:6a:21:dd:8f:90:4f:20:f0:b8:6b:fa:61:ae:2d:4b:31:
a2:d8:09:e9:01:4f:da:83:3d:fa:25:a2:51:02:23:c5:94:71:
fc:c8:11:f8:60:df:cf:20:7e:5b:ed:cb:23:f0:49:d2:6c:d7:
ba:c7:33:92:2f:de:75:24:9d:55:82:bd:f5:57:09:13:9f:71:
3b:43:cc:16:9c:5c:e3:f1:54:2f:b6:55:1c:76:da:b0:81:46:
79:40:ce:3b:a7:63:d9:2e:d4:9d:31:01:a6:bf:1b:45:3d:56:
fb:0d:a6:03:b3:6f:ff:be:88:74:1a:f5:8b:a5:9e:c7:a8:0d:
66:97:22:31:13:d5:8e:9d:d7:ec:c4:f8:aa:55:8c:b1:e4:44:
84:f0:7e:86:2a:58:f8:84:fb:f6:fb:03:3f:ea:8b:98:ad:96:
e6:98:d6:07:d3:f3:e2:b5:ef:18:11:ad:f8:44:9c:51:16:dc:
4f:ba:ac:32:79:95:7e:b5:34:bc:16:f0:5c:5f:ea:1d:02:93:
3a:15:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:09:15 2025 by rpki-client