Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: lTF+W6/eK0zRwtKAT6J4xIGXk3Sk0o2BntqFT1tu7Bc=
Subject key identifier: A5:1D:0A:E5:88:2F:9F:CB:E8:2B:BE:E3:46:2C:56:40:A9:E8:9C:3F
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 01974D44A0B3F5414050C3FAAAA4FF8C1D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 0F60
Signing time: Sun 08 Jun 2025 02:00:32 +0000
Manifest this update: Sun 08 Jun 2025 02:00:32 +0000
Manifest next update: Mon 09 Jun 2025 02:00:32 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: X3PXe7BEWAnNny+4IHwC14KWh0GeIdI8b4NBF/fsaIw=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a0:b3:f5:41:40:50:c3:fa:aa:a4:ff:8c:1d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Jun 8 02:00:32 2025 GMT
Not After : Jun 9 02:00:32 2025 GMT
Subject: CN=a51d0ae5882f9fcbe82bbee3462c5640a9e89c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:58:4f:b9:d1:d7:34:db:16:3d:d1:c4:e1:
e6:06:15:ee:49:c1:91:ab:bb:02:ee:bc:82:f3:7d:
2e:20:c1:05:01:01:69:08:2c:86:58:93:26:81:17:
23:8d:d1:ed:d3:48:d3:1f:a4:8b:86:d7:e3:e2:3b:
1d:5b:59:dd:15:e8:29:6f:85:ed:80:f6:22:ef:5d:
af:9f:cc:4b:bb:4d:65:72:d2:2b:30:a0:72:d1:6d:
a9:6b:8e:e2:84:fb:2e:21:07:a9:e8:f6:13:93:0e:
71:72:ec:81:f8:3f:5e:a3:1c:33:dc:ec:3a:b3:fe:
77:e4:1a:e8:3b:16:a5:6d:ae:6b:81:e1:37:40:87:
19:3f:59:63:4b:47:92:99:1a:3c:d1:f4:fe:b5:c5:
a2:de:0e:ac:81:99:29:c9:8f:a8:84:16:2e:25:7e:
a4:99:50:c3:47:79:54:95:9c:5b:9f:b3:12:49:23:
45:38:e0:32:5f:9c:b7:c6:8d:75:22:bb:f9:d8:0a:
f3:3f:f8:68:d0:ca:67:8b:fe:b2:70:87:e7:14:b0:
4e:69:b5:81:b3:09:80:bd:c2:fb:d4:a7:bb:d5:5f:
73:0a:fe:02:ac:aa:12:67:cc:84:7f:6d:52:27:3e:
dd:a1:c3:a4:e1:1f:db:ec:3f:e1:84:5b:61:64:bc:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:0A:E5:88:2F:9F:CB:E8:2B:BE:E3:46:2C:56:40:A9:E8:9C:3F
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:3d:82:31:33:e5:11:3e:2d:46:5c:bb:0a:6b:49:36:f1:
e9:36:7c:55:a5:3f:c0:2b:14:ab:c6:0f:dd:01:bf:eb:6e:fe:
4a:a5:27:c2:d4:06:fb:ab:8a:d4:68:39:4f:5a:da:62:65:65:
91:9e:5f:da:4f:75:51:7d:c3:f5:34:5a:3e:35:eb:cf:00:da:
88:17:db:4c:97:bf:40:18:3b:51:0e:04:47:d1:36:e7:bf:47:
1b:fa:1e:96:8d:11:5b:59:a8:19:76:40:d8:1e:f3:4c:c7:e5:
25:a6:ac:b2:c6:eb:ce:27:79:f1:53:a6:25:b9:61:cc:6d:e2:
f2:d5:90:61:43:84:4a:2a:87:fd:cc:ae:5f:e2:00:4d:e9:ce:
cc:0e:a2:5b:52:0d:00:46:86:93:be:f9:2b:de:e8:09:c6:48:
7f:75:a7:7c:77:2c:41:ac:6b:c6:71:12:93:e1:dc:3f:43:1d:
73:11:d5:c3:ab:bd:bc:8e:28:42:c4:a0:63:82:3d:55:c9:c6:
51:a0:89:74:7a:22:15:63:5d:d7:0d:a6:d1:04:7b:68:4e:ca:
c6:e3:1a:11:95:06:fe:cd:05:36:70:de:cc:27:c5:85:02:36:
b3:c3:a0:2f:54:2b:34:b4:3d:29:33:dd:03:7b:e5:e8:6f:70:
a0:db:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:20 2025 by rpki-client