Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: TgENEUNScCO4cORdz0cEbv2lA77C354qddGFR/w0Y0U=
Subject key identifier: 29:78:8B:FF:77:EC:8C:FC:AE:41:49:DB:69:DF:31:E4:D3:F5:DF:12
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01974A0D05E15235165508157AF3F829DD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 0FDE
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: rIZ2O9flvWVpD97+ywTo/W3ijEOBMKQr6w4tXoTOnGo=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:05:e1:52:35:16:55:08:15:7a:f3:f8:29:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=29788bff77ec8cfcae4149db69df31e4d3f5df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:29:07:94:90:f1:29:0c:83:b5:80:e0:c7:
0b:49:e8:98:30:74:47:b5:53:4d:f1:5e:a5:c0:27:
33:e4:09:ca:81:a4:b2:17:53:28:3b:3f:30:a2:2e:
5a:dc:f7:5f:be:44:74:f0:a3:cc:39:62:f0:8e:aa:
9c:c8:68:cc:6c:09:cd:9e:64:bb:d5:c6:9b:2b:f8:
bb:ff:19:4a:4d:5b:8f:7f:8f:57:b1:3c:f7:62:d4:
92:90:e5:ca:37:08:36:08:79:f1:a8:0f:b4:92:8b:
1c:d2:70:cc:4c:e1:a3:b1:c9:1c:83:f1:15:69:ec:
ab:51:65:82:61:21:95:3b:0f:a2:9d:20:8c:ab:61:
2d:08:45:ee:28:ad:a4:2f:64:8e:9c:5e:d5:9e:fc:
c2:8e:c0:10:1c:48:92:e4:7a:57:c4:cd:99:60:29:
38:72:1c:98:a2:62:d4:fa:16:32:b0:d1:16:7b:8e:
8c:12:64:36:c1:1c:dc:5f:8b:ca:00:15:d5:2c:0e:
69:1a:c9:89:fc:1d:19:e4:51:33:c5:8d:53:c8:42:
3e:7a:56:54:c4:94:13:11:ca:36:53:76:cf:77:78:
98:5f:b7:14:ce:fe:96:30:1e:21:61:2b:b7:54:c9:
e8:85:1d:6d:e2:40:9d:d4:c2:54:41:93:50:07:fe:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:8B:FF:77:EC:8C:FC:AE:41:49:DB:69:DF:31:E4:D3:F5:DF:12
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:39:95:04:87:d3:78:ae:67:6b:f8:2f:63:e6:c7:83:57:37:
63:59:3d:9c:2f:17:f3:1f:1c:dc:7c:50:1a:9d:21:10:17:19:
cb:b0:0c:31:d5:78:0e:07:36:f5:ad:a4:66:ed:ec:40:d4:5b:
c5:0f:99:3d:57:72:32:40:b0:61:19:84:ba:b8:ba:d2:8a:e6:
06:b2:53:5c:18:7a:42:9d:0f:06:22:d5:61:83:f4:22:59:76:
fa:7e:55:a4:d7:4c:54:d3:a2:02:ba:ac:e1:1a:a2:83:68:4e:
a1:74:e5:72:3c:70:e7:74:b2:65:f3:c2:24:8a:69:c5:be:6b:
9d:fb:5a:23:71:44:5e:68:3c:36:dd:3c:5c:b5:15:a4:f8:85:
25:f1:15:0e:a1:5d:7c:67:3a:54:25:91:ea:3e:92:d0:ef:f4:
2e:57:c3:8b:44:13:0f:3b:ad:68:cf:96:88:2d:5c:f5:2d:f9:
f9:fd:95:95:68:91:1a:db:94:60:29:0c:9b:2a:47:42:af:97:
0a:4d:65:98:5b:55:9e:60:15:f9:0f:12:58:28:ab:71:f6:19:
8b:05:82:2a:a1:55:39:0f:2c:3b:5b:ee:4d:97:92:59:eb:2c:
cb:68:f1:b6:be:10:c3:19:69:bb:11:e0:45:a2:4d:12:82:53:
54:3e:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:22 2025 by rpki-client