Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: ugs5cT9btNI7AFRehpCPrJmWyAkzKxUW+blNA65o/zg=
Subject key identifier: CD:8A:F3:DD:45:75:DE:2A:83:9A:93:90:C4:6B:F9:6B:96:C7:07:94
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01974855558B348DB34106FC121B379721A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0A71
Signing time: Sat 07 Jun 2025 03:00:41 +0000
Manifest this update: Sat 07 Jun 2025 03:00:41 +0000
Manifest next update: Sun 08 Jun 2025 03:00:41 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: YZlxfjsrO6A48ErWbm47Yuhv8IQsDuO4aYtoMicq+lA=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:55:8b:34:8d:b3:41:06:fc:12:1b:37:97:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jun 7 03:00:41 2025 GMT
Not After : Jun 8 03:00:41 2025 GMT
Subject: CN=cd8af3dd4575de2a839a9390c46bf96b96c70794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:b2:4c:43:66:9d:5e:6b:b9:41:7d:d0:35:
84:db:29:2d:5c:4d:df:be:dc:c4:b0:86:5d:4c:8c:
be:7e:35:ea:aa:c4:37:ca:01:02:63:94:60:d5:e4:
c1:a4:6d:9b:6a:68:7a:01:e0:c9:1e:65:85:98:8c:
50:b1:80:92:ef:1b:bd:34:23:be:f5:aa:f0:d5:07:
e0:90:11:3b:d3:90:18:3e:8f:15:17:43:a7:7c:cb:
ac:ce:f8:7b:cb:45:25:e1:53:c7:f3:f3:ca:11:e5:
1e:00:36:07:c1:f7:43:f2:83:f6:0d:c3:ff:28:72:
dc:b7:20:2b:3b:d3:39:eb:e3:f6:9c:3b:eb:83:6b:
e6:06:6a:66:f3:63:b5:22:4c:ef:4b:6f:ce:f5:fe:
f9:5a:43:c4:87:af:19:aa:8c:2d:32:72:0a:4b:49:
c1:ac:57:96:cf:13:05:d5:a9:22:ca:0f:a4:b2:2c:
b3:59:40:2a:9e:36:ee:69:83:ba:1e:bf:86:7c:58:
19:80:7f:72:2c:6d:72:83:63:64:a4:31:8b:ed:73:
e4:21:39:53:af:7d:49:6d:bf:e1:43:e1:4b:15:f9:
1e:33:56:a1:1d:dc:bc:a6:2a:79:af:ea:9e:bc:af:
e5:ed:38:74:bb:0b:28:81:7b:06:40:3d:18:18:1b:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:F3:DD:45:75:DE:2A:83:9A:93:90:C4:6B:F9:6B:96:C7:07:94
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:cf:8d:04:69:43:0d:1c:32:40:a2:c7:24:ba:23:e5:32:
74:b9:15:2a:cf:53:d6:f3:62:1a:2b:8b:50:f8:eb:27:a9:aa:
46:75:57:76:f1:ad:b9:dc:aa:0b:3d:16:cb:a8:b4:2f:27:0d:
c2:d9:46:cd:41:38:64:72:50:5e:98:03:cd:d1:2e:f2:0b:99:
9b:44:e7:b0:cd:84:b2:27:c7:56:fa:ba:0c:23:80:c1:b5:aa:
bd:09:d1:83:39:e6:f5:3b:f5:6e:e5:c2:bf:26:ce:a3:4a:99:
32:5d:ea:a9:91:68:9e:22:18:b7:04:50:a4:6b:7c:18:ca:18:
63:40:e7:29:74:87:1b:1f:db:7c:db:ad:6b:a2:c2:dd:f0:56:
99:17:2f:9d:b7:b4:b4:c4:da:18:3f:9b:6c:16:d6:cc:48:ce:
df:19:4f:ec:08:e2:ee:ea:a7:0d:f7:a0:b5:8f:2c:99:e8:10:
d5:33:65:fc:f0:78:65:01:95:71:59:aa:a4:a2:d6:d1:b7:4e:
fc:4d:58:e7:73:93:81:eb:27:a4:72:d2:92:c2:0b:4f:1e:0b:
37:1b:e2:90:4b:e3:6f:97:0f:5f:42:8f:4b:0c:de:19:13:a9:
23:b4:72:6c:22:0a:1f:81:7c:76:37:dd:2a:c6:14:de:a2:86:
01:dc:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:06 2025 by rpki-client