Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: TuPZERxvoqg2AFcisa6GvvCyh6aWPBRQONpv0pGSSPk=
Subject key identifier: 58:07:52:A8:9C:EE:04:0D:4B:1F:3C:2E:D6:99:FA:70:E1:66:B7:7B
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 01976215D2B8DF04EFA6D791781477A7B4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08AB
Signing time: Thu 12 Jun 2025 03:01:26 +0000
Manifest this update: Thu 12 Jun 2025 03:01:26 +0000
Manifest next update: Fri 13 Jun 2025 03:01:26 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: rUrsW4JaVj8VX1UFq+GUfY8F6jqBkG82qAkFx67wXfQ=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:d2:b8:df:04:ef:a6:d7:91:78:14:77:a7:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 12 03:01:26 2025 GMT
Not After : Jun 13 03:01:26 2025 GMT
Subject: CN=580752a89cee040d4b1f3c2ed699fa70e166b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:34:90:7d:76:82:6e:a2:1e:b2:e7:ae:1c:
c2:c9:0f:6e:2c:6c:6b:c8:75:6c:66:30:ae:be:b3:
9f:d6:09:11:24:8a:59:ed:5f:97:4a:55:76:b1:21:
31:f8:ce:e8:c3:9f:d5:a7:cf:c9:4a:1b:59:79:36:
2f:dc:c6:ea:9e:8e:a4:ba:88:ae:34:76:3c:2d:c1:
39:23:33:61:02:59:47:0f:ba:05:6d:49:5f:6f:a3:
9a:ac:4c:55:71:bb:65:cb:0a:bc:bc:80:23:b1:f5:
42:3f:f8:25:34:59:d7:a8:61:9f:8b:3e:6a:64:44:
7f:13:1c:f9:ea:d1:ef:70:a1:33:cc:de:58:3e:f8:
47:9f:67:22:fd:ee:71:96:ba:8f:57:d0:99:b1:4b:
f6:c3:c8:d5:17:d6:c5:c2:16:b0:dd:8b:c6:53:00:
15:f8:49:bb:0a:99:43:75:2d:a5:15:2b:59:ce:cd:
54:e1:fd:d2:dc:f1:f8:fe:a1:17:6c:28:f5:85:a5:
db:4b:99:b2:e0:aa:5a:82:7b:51:d6:dc:51:7d:cd:
f4:b4:53:5f:46:c3:73:94:54:4d:f1:ae:42:30:a8:
a1:a3:4d:9e:af:02:4d:df:0b:a6:c9:4a:b9:69:78:
64:66:b3:89:9d:04:22:8e:98:f5:57:f1:2a:da:5c:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:52:A8:9C:EE:04:0D:4B:1F:3C:2E:D6:99:FA:70:E1:66:B7:7B
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:9d:19:ef:15:65:6c:90:21:da:dc:bc:0f:ad:d5:f3:cd:
89:2d:ab:35:73:7c:a2:79:0a:88:ec:80:e4:5b:5d:f5:6c:0a:
f4:e0:7c:fe:ed:ce:95:c9:5d:00:43:03:bf:b9:09:1d:e4:72:
4b:51:69:3d:c5:9c:5d:26:35:7e:e2:f5:67:e5:d6:78:6b:71:
a5:23:43:2b:16:17:34:60:8d:f4:4d:20:8f:1f:c8:b9:c9:42:
62:c8:20:f3:11:21:1b:1d:4a:5f:99:75:90:6e:b7:69:fd:02:
3c:32:e6:84:40:cb:21:71:41:a2:e4:02:3d:c4:93:96:76:eb:
9c:bf:18:29:6b:91:b7:ea:bd:23:0c:69:1a:23:9e:4a:b6:b4:
c3:da:57:39:02:6d:ae:c8:66:f5:8c:2d:a2:7c:69:09:a2:46:
d4:42:98:70:2c:d0:d1:9e:1c:6b:51:d1:62:39:60:78:eb:90:
93:c0:df:30:f5:77:f2:76:3a:1f:45:ec:52:45:64:5c:56:6b:
02:24:fd:65:57:3a:4a:e2:f8:f7:f0:ad:f9:50:f9:d3:07:51:
4e:dc:1e:47:b3:15:d4:3e:38:e1:fc:9f:6b:2b:dd:ed:b0:53:
7b:6f:28:08:ce:64:b2:2d:70:b9:6b:5c:45:92:41:e3:38:57:
61:9f:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:58:05 2025 by rpki-client