Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: ROtCtMdQ3GsTZMRT1DaQ+mxOM9+FJw7GTN/DlR5oD2g=
Subject key identifier: 73:0B:90:9C:D8:E7:91:A8:D0:B5:64:7A:A7:C4:EA:E5:B7:7A:96:6D
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0197640411FF4445982E48A2246CC0FF4DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08AC
Signing time: Thu 12 Jun 2025 12:01:17 +0000
Manifest this update: Thu 12 Jun 2025 12:01:17 +0000
Manifest next update: Fri 13 Jun 2025 12:01:17 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: NEc11/v4CFfJ2kaQFDFkgua/I9LuQZQAAKR1GaYb2z0=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:04:11:ff:44:45:98:2e:48:a2:24:6c:c0:ff:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 12 12:01:17 2025 GMT
Not After : Jun 13 12:01:17 2025 GMT
Subject: CN=730b909cd8e791a8d0b5647aa7c4eae5b77a966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:b6:d8:68:0c:4c:8d:f2:b1:b1:16:cf:8c:
3d:0e:37:da:c5:fb:c8:d2:0c:24:2d:1d:33:64:ec:
3f:0e:a9:88:15:08:75:66:c6:54:0d:c8:3f:d5:36:
d5:64:ab:27:33:b6:c2:4d:70:fd:49:72:35:70:b4:
09:b1:8e:40:32:4f:ab:73:ba:24:18:7d:f4:47:e4:
12:ee:71:8b:ad:eb:42:95:75:c1:b6:32:ef:38:c1:
bc:3e:4f:01:7f:e6:85:5e:e7:b2:5a:5c:68:ed:cc:
00:a4:fa:93:6d:83:33:20:eb:2a:b9:f9:b9:2e:ba:
3d:87:2d:05:cb:2f:c0:84:1e:d3:da:7f:bb:9a:64:
c8:58:0e:0e:31:13:a8:ab:93:c8:ba:ff:b4:c9:39:
e4:b6:21:0c:7a:62:03:0c:02:4e:6a:fa:10:a6:3a:
34:a4:5a:f5:08:6f:6a:bb:ed:d4:1f:0f:f8:b2:19:
6b:69:ff:1f:af:fa:50:8c:63:ce:2a:89:53:8c:12:
c5:99:6a:54:70:fa:3f:5e:24:cd:44:e8:84:81:d8:
f1:3a:49:b7:5b:9a:60:cc:b9:ba:42:d0:c1:41:09:
dd:38:1c:62:05:a3:d3:98:d6:92:3b:43:72:93:c6:
d0:5a:ac:49:d3:0b:e3:4c:b5:22:56:22:0c:7c:06:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:90:9C:D8:E7:91:A8:D0:B5:64:7A:A7:C4:EA:E5:B7:7A:96:6D
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:bd:9a:52:e5:1e:75:53:eb:73:a3:6a:9a:4f:8b:ce:81:
4a:6a:55:8e:44:a3:bd:08:8a:4c:12:dc:4a:05:de:1f:00:be:
94:f2:89:b3:e3:86:30:9a:45:3b:46:1c:2e:b8:cc:3e:d7:e4:
51:33:89:7f:a5:3c:e6:ca:c1:65:4b:2a:7e:3c:28:da:d0:87:
c0:4b:03:bb:39:1e:5f:b5:1f:83:4c:44:17:bf:93:fd:44:c5:
0e:fd:33:1d:a3:70:26:a4:93:c4:d1:b8:b6:39:8e:d7:1b:6a:
5f:8d:9d:e8:19:83:43:d3:d6:ec:ca:a4:1c:29:f9:5e:be:fd:
be:70:1c:6a:58:07:4c:5f:47:a0:24:39:27:ab:19:4a:13:68:
dc:5b:a8:ab:17:e8:af:76:5d:4a:67:ce:47:97:f5:f0:ca:c4:
f3:19:5a:7d:bb:20:65:95:ed:0f:d6:f4:91:b0:4d:71:6d:a7:
41:de:ae:a0:9a:d6:9c:2a:a6:c0:ac:59:59:27:14:c0:1b:ae:
08:36:5d:0a:30:d9:8e:08:f3:15:3e:47:e5:75:65:5f:d7:04:
a8:d2:e9:bc:f9:32:56:b1:0b:fc:d5:52:e6:b1:9e:7a:75:19:
2d:79:81:4d:4b:64:6c:ba:30:de:6e:ea:67:bd:79:81:e6:ca:
1e:78:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:55:44 2025 by rpki-client