Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: MavWKn84rnGLIsruGI7onI4HUoeqH2aPpMG4S/+FdmE=
Subject key identifier: D0:0A:49:05:58:AF:1F:6A:EA:8E:2B:98:CE:1C:DC:9B:3B:DB:60:37
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0197567F6DE27CC75262379DA404BEAEE42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08A5
Signing time: Mon 09 Jun 2025 21:01:21 +0000
Manifest this update: Mon 09 Jun 2025 21:01:21 +0000
Manifest next update: Tue 10 Jun 2025 21:01:21 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: 7mXqiOgHmaarTtRvqeSYrZO+xdV0acReWVJnOYkMIR8=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7f:6d:e2:7c:c7:52:62:37:9d:a4:04:be:ae:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 9 21:01:21 2025 GMT
Not After : Jun 10 21:01:21 2025 GMT
Subject: CN=d00a490558af1f6aea8e2b98ce1cdc9b3bdb6037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:2d:df:98:df:db:c0:be:4d:6b:dc:51:d2:
5e:57:c6:c3:86:5f:0e:89:f6:d1:8c:8e:cf:c8:57:
48:13:4a:06:b2:bc:30:50:aa:bd:d1:59:94:38:1b:
ca:93:81:29:5c:a3:bc:63:ef:26:83:d9:9b:6b:ea:
c7:26:c3:b4:fb:ea:a9:a9:db:7e:dd:8e:f2:60:57:
84:fe:03:c5:ef:a2:ec:7c:c1:83:11:1d:1b:e4:da:
08:6d:0c:98:02:2e:eb:6f:06:6a:47:36:cd:e5:d2:
33:27:b7:54:89:14:07:d4:85:56:fa:8f:72:b6:0d:
9a:9f:ee:6a:f3:b2:ad:bd:b7:31:64:ac:87:61:ee:
63:97:c6:76:6b:ba:3c:56:66:b1:63:31:a5:ba:64:
40:85:9d:99:22:c4:25:42:f8:d2:69:82:47:19:37:
bc:c5:e2:31:be:65:c9:aa:59:4e:53:62:19:88:e0:
23:9a:9a:f8:ce:d9:69:0a:ca:38:d3:33:7f:99:e5:
d1:59:88:1f:c8:86:88:15:4b:29:f7:e0:d3:7c:38:
1c:c3:6c:d4:a0:9d:24:d4:b8:4d:06:c0:84:e4:52:
ab:22:2b:c8:70:08:bc:92:37:db:87:b0:db:d8:39:
ad:47:47:d8:b6:d5:90:86:a2:c4:3d:b9:c5:37:77:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0A:49:05:58:AF:1F:6A:EA:8E:2B:98:CE:1C:DC:9B:3B:DB:60:37
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9c:67:a5:95:11:45:d4:96:0e:25:89:19:7f:2e:04:e7:93:
3c:bf:b7:6e:12:79:23:3c:c8:00:92:6f:17:44:bc:2c:ef:e2:
d8:b5:5c:1a:9f:a9:d7:f7:f5:e9:70:d5:25:f4:de:f7:ba:00:
83:bc:e9:d3:c6:35:18:01:0e:99:5d:97:46:50:ac:02:f9:37:
80:76:d5:5f:1f:d0:8c:12:96:5d:0c:c9:d3:2f:01:d6:c2:68:
b2:cd:25:86:17:56:f2:af:a8:a2:ab:df:e1:7d:b6:d7:4e:73:
60:33:4c:d4:b5:75:ad:44:0e:d1:3c:93:60:ec:78:4a:68:01:
86:9b:c6:94:92:3c:ad:31:cd:d5:23:6b:8a:1a:0b:25:c5:a8:
ad:dd:a5:b4:52:a0:3e:8c:65:cc:e7:1f:01:25:5a:e3:e2:7e:
f3:02:8a:f2:db:b9:b4:46:e8:f2:ed:fc:bf:f8:b0:dc:30:d3:
2f:84:8e:ff:a4:4e:09:3a:a3:1d:5e:e7:4d:22:ab:25:60:e0:
02:dc:a8:dd:3c:14:3e:39:f4:ee:69:dd:4f:22:43:8e:f6:23:
15:ab:83:9f:ac:89:de:b2:0a:df:3b:d1:8b:de:2c:b6:55:61:
7a:b3:05:a2:b2:05:63:12:d3:67:b1:4b:ef:44:df:0c:4d:52:
2f:ee:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:19:59 2025 by rpki-client