Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: 5Jx2T7LepyqYqMPk+v01B+xlPSPlBeA+zw6S6+dLjDQ=
Subject key identifier: 53:55:CE:AB:C1:FC:35:4E:D9:16:36:10:D7:A1:2C:D6:6F:3A:CE:91
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 019745C29400DAC74B7CED214D7FEA62F1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 0904
Signing time: Fri 06 Jun 2025 15:01:09 +0000
Manifest this update: Fri 06 Jun 2025 15:01:09 +0000
Manifest next update: Sat 07 Jun 2025 15:01:09 +0000
Files and hashes: 1: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: 7bxLAP8pdO1tOL0DPdtmojFS1uWXrL6mSjNIceUMNXE=)
2: b9Hu80_829heeLvFjfJdJz5nCTc.roa (hash: j+SJeADqUhFu2qLu6938DWITw4JSWTcM1pVfvfeWeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:94:00:da:c7:4b:7c:ed:21:4d:7f:ea:62:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jun 6 15:01:09 2025 GMT
Not After : Jun 7 15:01:09 2025 GMT
Subject: CN=5355ceabc1fc354ed9163610d7a12cd66f3ace91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:69:25:ed:8f:5b:4c:3c:39:08:eb:6e:8f:
4e:f4:6d:17:c2:4d:54:ed:21:ab:c2:ba:23:96:b3:
35:f1:2f:fe:d5:d9:8c:08:2a:29:28:dc:2f:06:61:
63:6b:03:eb:da:8e:64:f9:69:83:04:fa:ff:c6:50:
63:8c:bd:be:aa:80:14:2a:d3:8c:d4:f1:a9:10:c4:
7e:ec:fb:a5:ac:bd:71:f7:e8:e8:8c:9d:44:fd:77:
c9:8c:45:9f:e7:92:9c:eb:0e:0b:45:ed:fe:e8:db:
e3:63:0a:4d:83:cd:b4:41:4f:14:a1:3f:cd:49:b0:
71:c5:1e:56:53:c0:65:74:7e:11:97:67:f2:17:c7:
3e:23:fd:e3:cb:cf:25:ce:b6:bb:f5:99:ba:d7:44:
9c:3f:4e:dc:96:4d:4c:5d:75:48:89:19:b4:df:7f:
88:72:23:c4:f8:67:af:35:4d:a1:53:db:a1:04:84:
19:90:63:c2:71:55:4b:9e:05:60:7b:31:2d:04:9d:
e4:8f:79:48:dd:40:99:a5:a4:47:ba:f6:89:8f:e8:
60:c2:f4:ed:b9:c8:53:12:d2:5a:7a:bb:a5:11:55:
2c:96:e4:6c:87:18:4a:bf:a5:9c:01:92:d0:53:51:
e5:36:a1:b7:56:84:15:45:c9:6e:46:14:7d:b1:0e:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:CE:AB:C1:FC:35:4E:D9:16:36:10:D7:A1:2C:D6:6F:3A:CE:91
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:cd:a1:73:a5:4e:b1:8e:4a:38:3b:2b:d1:db:04:51:55:
a8:8d:67:b1:15:6e:00:fd:53:4b:a8:7f:b6:7b:c0:90:31:ca:
a0:3d:51:14:14:8a:aa:8e:7e:00:0e:1c:3f:54:b4:60:4f:51:
61:c1:5d:62:45:be:ba:d7:51:0c:7e:d7:75:a3:e0:58:6d:45:
29:3d:8e:80:67:cc:0e:d4:8a:cc:c6:35:79:56:28:18:8c:03:
60:51:03:c4:45:72:69:e7:53:9c:49:ec:27:6a:33:8d:62:9a:
74:6e:49:e1:f2:dc:08:4e:82:2b:45:8d:a1:53:67:e6:72:70:
63:1a:27:9e:04:29:91:40:0d:f5:9e:8c:a5:5b:fe:2d:9b:1a:
88:85:96:aa:37:d8:e9:4c:05:7f:31:09:77:00:38:78:b5:98:
60:f9:b9:9d:32:46:64:46:91:e1:57:1a:ab:4e:69:53:bd:bf:
d9:9b:40:d0:98:2a:5f:00:ac:52:1d:a9:68:b0:29:10:25:b1:
36:4d:e0:6f:4b:82:69:f4:44:bd:2e:06:8c:17:60:62:e7:3c:
b4:ac:3b:46:51:9e:81:c6:0f:1c:2d:73:f8:fc:fb:7a:44:23:
63:05:19:5f:0d:f7:04:a3:e6:67:a4:2b:e0:b7:78:d7:7f:5f:
26:6a:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:09 2025 by rpki-client