Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 9czy5wr93PdYI7ibh8ryE3oIk+UDoNyAiJ5BAzkJig8=
Subject key identifier: 2C:3E:B0:48:79:20:58:12:27:AE:72:86:06:CA:0F:94:A8:72:96:0B
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019761703E875ECCAF0AF869F301CABC5FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 00:00:35 +0000
Manifest this update: Thu 12 Jun 2025 00:00:35 +0000
Manifest next update: Fri 13 Jun 2025 00:00:35 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 24yMjxuoy2hZQMiXQih3/9fCimNyl1LUNSTX+Ho9l18=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:3e:87:5e:cc:af:0a:f8:69:f3:01:ca:bc:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 12 00:00:35 2025 GMT
Not After : Jun 13 00:00:35 2025 GMT
Subject: CN=2c3eb0487920581227ae728606ca0f94a872960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:fd:70:3d:77:b4:2c:8d:93:e7:3e:60:e6:
c9:d4:ad:df:dc:a5:5c:2d:35:d9:20:55:d5:d2:f6:
50:b8:60:9a:40:52:f1:d5:aa:7f:77:59:fa:af:87:
05:ea:95:72:f7:72:66:e0:ee:8b:b1:c9:91:ce:c6:
0c:60:6f:8f:13:c2:1d:55:37:98:dc:09:e4:39:d1:
ad:27:35:8a:e5:d4:1b:7b:5a:ca:31:bf:f3:96:8e:
95:a6:1d:9c:f9:05:57:b5:e3:2f:8b:89:9b:7e:7b:
c8:4d:52:49:60:34:1c:5c:88:97:e9:25:67:10:86:
83:9f:89:94:fe:77:63:96:d6:29:64:8a:51:71:3b:
ee:fd:0f:a8:c8:42:a1:be:8d:46:e8:8f:da:d0:fe:
ea:83:81:fd:39:cc:8c:b9:c7:54:39:1a:c1:c2:62:
67:e9:07:6d:fe:3b:f6:3c:97:15:b0:27:32:da:76:
02:a4:2d:b3:a6:7e:b2:e9:9c:cd:b6:51:15:04:e7:
7d:88:c6:bb:1b:a6:1a:c9:5a:7c:19:d5:c8:ed:c0:
83:98:38:22:3a:51:cd:4b:fd:66:bd:a4:ac:90:b0:
2c:bb:29:4b:70:9f:78:8c:dd:4c:0e:50:c2:63:b2:
0d:85:8d:2c:b5:3c:fe:68:92:36:ce:1c:fd:c1:a6:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:B0:48:79:20:58:12:27:AE:72:86:06:CA:0F:94:A8:72:96:0B
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0d:b3:fa:9a:20:6e:c7:84:a9:f8:f0:47:62:42:f4:de:13:
60:7d:4b:25:b5:50:31:f3:e5:d6:79:37:f1:9d:77:47:a6:f6:
79:e6:53:d3:a2:dc:f7:8c:27:d8:73:fa:b5:fe:31:6f:d6:d4:
98:43:74:d6:78:c2:43:ec:cf:60:9b:59:78:f3:c5:8d:5c:0f:
42:cf:68:83:b8:53:4d:db:03:7d:aa:53:c2:c3:0e:85:0d:c2:
c6:f4:3c:9a:2d:57:8e:40:ff:99:6f:f6:c6:a2:25:0b:2d:58:
d2:9d:6c:5c:69:d5:8a:71:a2:30:13:bd:d0:dd:62:ca:14:57:
50:7c:4f:2f:a5:72:29:c6:ec:3f:63:f1:e0:df:ce:86:22:46:
18:4f:98:28:a1:1e:18:bb:ea:68:07:15:b0:1e:4e:2e:a9:ce:
40:40:ed:2e:e2:83:69:e3:2c:02:ca:b1:9a:50:6f:ba:57:0f:
4c:37:b3:1c:b6:21:cb:d1:5a:95:3a:e5:55:5c:49:9d:79:6b:
cb:48:e2:d4:a9:28:50:a9:fb:0d:ab:38:db:d6:44:9b:5f:ae:
ab:87:07:6c:c9:3f:f6:f7:1b:89:0f:48:8b:58:58:b8:ec:08:
01:a0:a7:04:da:d3:b4:ba:3d:46:55:39:c7:2b:e2:e8:bc:e2:
3c:1f:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:48:49 2025 by rpki-client