Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: SPOgEP6WUVMXpP8dxzcRnGk2lal7LKMtyOMkI8NKH+c=
Subject key identifier: 6D:75:E0:31:BF:0D:08:15:DC:AE:7C:75:82:FA:43:B0:8A:FB:99:AB
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 019745F980EC166F1A9FCAC29314A0B72B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 16:01:08 +0000
Manifest this update: Fri 06 Jun 2025 16:01:08 +0000
Manifest next update: Sat 07 Jun 2025 16:01:08 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: OXn1enUofQojr1helptO6OULY8Pzksk0lU/7nzOGGFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:80:ec:16:6f:1a:9f:ca:c2:93:14:a0:b7:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Jun 6 16:01:08 2025 GMT
Not After : Jun 7 16:01:08 2025 GMT
Subject: CN=6d75e031bf0d0815dcae7c7582fa43b08afb99ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:da:68:95:1c:04:55:f1:c9:2b:5e:e9:e5:
99:60:c5:e8:92:f3:0f:71:d1:f7:4b:df:a3:af:54:
6e:0e:52:96:42:62:e6:18:ce:2d:19:3a:09:07:5d:
85:0a:7e:70:62:5d:4d:34:3c:4d:17:f0:e0:6e:36:
5d:a4:67:24:54:ca:85:41:95:66:ea:4b:ca:13:82:
48:9a:fe:d2:ae:0c:29:fd:cf:03:7d:5a:41:ab:61:
4f:11:1f:3d:e3:1a:74:92:1a:f8:9c:8f:33:c9:2d:
33:01:ef:ab:6b:bb:29:11:78:89:52:b6:2d:1a:74:
39:19:ab:3b:53:60:77:e1:03:52:1d:7b:57:44:a4:
e0:9a:70:14:0b:73:7f:b1:55:61:35:f4:6c:b2:17:
09:4a:5f:ed:e5:43:b2:74:bf:d1:9a:4e:99:ec:80:
d6:6d:71:1c:13:9c:9e:6c:b2:48:0b:37:2a:aa:af:
4b:c1:92:74:b3:59:78:ea:8b:5e:6b:6f:a1:80:18:
e6:b1:65:e9:b6:ed:f3:61:f0:31:9a:04:a8:65:a4:
54:16:9f:29:96:68:7b:8e:a8:de:20:f2:aa:37:db:
95:50:6a:c6:6e:03:9c:2c:75:5a:6f:7d:48:61:39:
4a:52:7d:d9:72:fe:32:32:b2:77:a5:fe:c6:ad:1f:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:E0:31:BF:0D:08:15:DC:AE:7C:75:82:FA:43:B0:8A:FB:99:AB
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:1e:0f:7a:c4:35:d2:b1:64:19:28:64:00:b3:fd:84:de:
bb:dd:34:b1:72:29:63:e9:b3:30:98:ac:a9:c9:50:96:2d:ea:
10:90:c8:aa:62:1f:f6:ef:4f:f3:2b:30:ec:fa:e1:bc:e8:5d:
78:4a:2e:8c:46:9f:6f:20:89:0a:13:2c:29:a7:b2:a4:64:14:
2f:33:a1:a9:3b:ac:d6:2b:95:9a:90:9a:bb:40:a6:4f:f9:55:
ae:b4:90:e0:f1:97:cb:b2:5f:40:3c:3b:a8:39:44:34:b7:f6:
4a:92:e7:aa:92:47:1b:9c:09:89:f8:5c:8b:65:f0:15:b3:a4:
80:44:d5:31:63:a7:f1:1d:d6:cc:a5:e7:ec:86:17:e7:7b:3c:
53:82:98:61:04:24:d4:3f:a6:7c:a3:a4:ff:13:69:b2:08:46:
0d:a9:11:fc:8b:ac:0d:8b:b9:e8:b7:44:11:fc:e9:16:ae:0f:
d1:08:1d:94:9e:39:a8:06:74:ae:00:d4:eb:4c:eb:55:1b:e3:
7a:aa:d1:ed:27:6d:37:4d:f5:55:80:78:9c:b3:aa:b2:99:d4:
ea:27:35:f7:e6:70:87:ca:86:33:22:98:d4:14:20:70:c0:25:
73:6d:df:01:2a:f2:ca:ea:6b:b0:e2:6c:2c:82:2b:0a:f4:a6:
39:51:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:32 2025 by rpki-client