Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: yYJOhPev46ZIMFSdgOaL6R6EEWc3P8fN37w6QDSXTic=
Subject key identifier: 5C:A2:2B:BE:D1:1A:EC:EF:3E:3D:B9:14:72:FA:20:A5:F7:0E:86:65
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0197586DD921FA7715269E9276077799C555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08A6
Signing time: Tue 10 Jun 2025 06:01:23 +0000
Manifest this update: Tue 10 Jun 2025 06:01:23 +0000
Manifest next update: Wed 11 Jun 2025 06:01:23 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: gIX7DhptJvSg+yKOPc5OcNFWEvYp/7CGZDlYBxdJYmY=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:d9:21:fa:77:15:26:9e:92:76:07:77:99:c5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 10 06:01:23 2025 GMT
Not After : Jun 11 06:01:23 2025 GMT
Subject: CN=5ca22bbed11aecef3e3db91472fa20a5f70e8665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:03:c3:3b:3d:c1:b7:88:67:2c:a7:54:fe:
ca:30:c6:ae:ab:eb:86:c4:a7:8b:85:b5:f6:30:c3:
76:3a:e0:03:3c:ce:c2:e5:e2:51:b5:be:b7:73:8e:
b6:61:a8:cf:9c:4f:2b:79:1c:51:df:69:b6:ab:f8:
4a:d2:09:e4:2e:2d:b4:9a:1d:14:ef:80:e8:62:3d:
36:5a:ad:01:05:f0:75:41:d4:f8:4e:3c:5d:c6:f8:
48:60:bb:70:96:51:7d:e7:ab:d3:27:3b:20:80:a3:
ff:5a:8b:16:3e:74:0c:39:07:1b:5c:a3:c0:44:e8:
6b:f1:4f:37:7f:86:da:89:4a:75:5a:0b:c5:16:6c:
c3:59:90:7f:d5:06:f8:92:f9:a3:9b:c7:a2:da:2a:
6b:e1:f3:66:5b:ab:dd:db:a2:98:aa:df:a1:1d:69:
65:c5:7d:40:51:1f:88:12:4d:d8:8f:ec:bb:24:7b:
0c:b8:11:a5:48:f9:e0:63:94:0e:ba:3d:19:e7:5c:
f5:ca:f7:6b:e9:36:98:e4:f7:58:d3:4c:2d:bd:b3:
57:f8:e5:a9:c7:90:36:2f:36:38:ae:27:20:b2:5e:
ee:50:5d:4c:1a:4e:80:3e:7c:8f:b8:7a:3b:3e:cd:
3a:1e:c9:d6:18:17:64:f9:30:eb:ae:0a:43:ab:46:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:2B:BE:D1:1A:EC:EF:3E:3D:B9:14:72:FA:20:A5:F7:0E:86:65
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fd:d7:fb:33:b4:b1:f5:49:34:fa:ad:d6:b4:2f:9f:2f:b5:
4b:ff:bf:0b:d8:08:30:f3:d0:a4:3d:a4:62:8b:96:83:18:5b:
b4:91:b4:9e:34:d5:4c:78:4f:f0:00:21:dc:f2:22:3b:52:6e:
db:e4:50:d4:db:c0:15:35:29:f9:a0:f2:35:72:85:b8:2e:15:
c8:b3:99:95:54:77:9b:ee:a4:04:4b:64:74:0f:c9:a7:9b:bf:
06:08:bc:2b:5f:71:07:10:4b:a0:ad:9b:1e:30:70:3a:28:55:
4c:57:ad:ad:83:2b:97:36:44:7e:62:53:7d:c7:86:dd:70:2d:
3d:f6:98:4b:97:7d:fe:8b:38:62:1c:84:4a:38:36:2a:e0:78:
13:46:a5:e0:0b:89:e8:3b:11:c2:48:51:ed:14:56:02:12:66:
57:25:49:c1:54:71:55:e4:7d:60:02:48:4b:a9:e7:22:5c:9a:
8a:d8:4b:95:60:d8:d9:9c:6c:3e:58:55:05:c4:29:61:6b:36:
60:ae:55:78:46:c0:df:63:b1:96:e0:3c:8a:d8:2b:3f:ac:c0:
88:19:7d:dd:63:c7:a7:2f:ba:3a:c1:5e:ed:80:0d:0c:53:28:
81:3d:e5:eb:05:08:1e:d0:5d:71:80:24:3a:a7:ae:4e:9a:23:
bb:fe:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:14:15 2025 by rpki-client