Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: ZYDXDOHNc3GOG+6qC6in2Ys/zSpNLxpGdkcfq0hL1oI=
Subject key identifier: 93:1D:F5:1B:EA:19:2B:FB:89:BF:8D:D3:66:5F:AA:38:4A:CC:07:71
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019769CF134CBB4D7233D432BD6901677746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08AF
Signing time: Fri 13 Jun 2025 15:01:07 +0000
Manifest this update: Fri 13 Jun 2025 15:01:07 +0000
Manifest next update: Sat 14 Jun 2025 15:01:07 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: J51PGXgmd6lgyo0HU0VSwyCAdLQCxiTCMiGTRyEe8Lg=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:13:4c:bb:4d:72:33:d4:32:bd:69:01:67:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 13 15:01:07 2025 GMT
Not After : Jun 14 15:01:07 2025 GMT
Subject: CN=931df51bea192bfb89bf8dd3665faa384acc0771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:ad:e7:38:77:48:a9:e0:7c:a5:3b:21:69:
5d:b4:0f:7b:ca:0d:4e:3b:12:2d:ad:a8:0b:11:3d:
49:49:67:b5:45:c7:dc:0f:93:bd:9b:16:f5:ba:ed:
39:98:cc:f3:94:5b:77:5d:cd:e9:17:bb:e6:1d:7e:
97:ba:e6:0c:f7:92:4e:9b:9c:41:c5:57:a3:03:e3:
49:2f:9b:11:aa:8d:ee:2c:44:5d:71:36:5c:ae:40:
57:3d:0b:2e:4d:76:6d:1b:cc:92:58:0f:b3:ef:d4:
6c:6a:5d:69:85:3b:c6:ff:9a:4b:1f:70:9c:a0:ca:
75:9a:a3:56:11:a8:71:09:ea:6d:68:01:08:02:b4:
f0:a4:d1:8f:bc:61:5b:33:1d:8d:e0:7e:bb:e9:60:
40:1b:ff:31:53:00:a2:77:55:29:a7:f8:40:47:19:
af:b9:62:7b:30:9a:6f:17:43:67:ad:73:d0:f6:b4:
55:dc:26:f9:3c:b3:86:cc:de:0c:63:02:8e:ca:90:
f6:a0:22:87:63:6a:3f:ff:95:9e:99:34:e5:cf:82:
f5:93:88:81:0e:c5:5f:04:53:22:cb:c4:47:a3:f3:
c6:df:a8:c6:52:ab:4e:6c:48:59:c7:ec:2e:5d:2e:
e6:79:16:0e:4b:bd:be:94:81:c9:a7:c3:62:21:c6:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:F5:1B:EA:19:2B:FB:89:BF:8D:D3:66:5F:AA:38:4A:CC:07:71
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:a9:fd:25:36:90:60:93:11:fb:e6:63:34:c6:e9:95:08:
0f:d5:7a:12:dc:47:37:b8:c5:2c:4d:1d:cd:cd:84:6d:e7:03:
a3:ce:de:b3:92:53:5a:69:d1:dd:9c:a6:eb:5f:f6:1d:f8:2f:
23:c6:7b:6b:4d:84:8a:b6:32:5a:3a:e2:5c:d7:fb:f5:ca:c7:
93:d0:2c:5b:9e:42:bf:d1:b3:18:20:56:58:20:f6:2a:fe:4b:
06:a2:7b:2e:59:ce:16:9b:ba:11:d1:2e:ee:8d:03:07:f0:b7:
2d:43:cd:35:30:10:f8:98:52:b9:e9:1a:47:48:35:50:a8:9f:
2b:5f:48:12:d1:69:29:2d:e7:1c:02:3d:da:15:49:28:c7:31:
25:6c:2c:2e:e9:4f:46:05:74:1f:4e:b4:e4:ea:03:19:b5:dd:
6d:29:4b:97:fb:cd:51:70:cc:78:78:54:4b:e5:8e:2b:d6:6f:
66:c7:ad:32:98:9e:66:4c:7e:be:1e:41:1c:80:db:b4:b9:8a:
bf:41:74:2f:3f:28:79:3c:5b:2d:97:ab:1f:91:4a:6a:6a:2c:
23:e3:5f:e9:09:9c:50:af:26:6b:bd:ec:f7:79:41:a7:56:4a:
52:e4:ce:77:66:c8:d6:39:a5:5d:96:14:2b:53:f5:eb:90:4e:
d4:1b:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:08:03 2025 by rpki-client