Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: ql0VK1mDLIhMrNuTRB/YGKtgs8jKP8GKQ3DNJbxOcYg=
Subject key identifier: E2:00:9F:65:5D:DE:99:E1:B8:19:62:20:73:DF:6C:6B:DF:6E:18:A5
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0197499F4E9724F57CB4DDB5A8C315E95EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 11DE
Signing time: Sat 07 Jun 2025 09:01:06 +0000
Manifest this update: Sat 07 Jun 2025 09:01:06 +0000
Manifest next update: Sun 08 Jun 2025 09:01:06 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: WE7KeJ42ffeovS81K+Bg4LlMfHGPtAimNR4FHyFjHDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:4e:97:24:f5:7c:b4:dd:b5:a8:c3:15:e9:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jun 7 09:01:06 2025 GMT
Not After : Jun 8 09:01:06 2025 GMT
Subject: CN=e2009f655dde99e1b819622073df6c6bdf6e18a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:28:84:27:90:c0:00:19:cd:0a:1e:a4:71:
ad:c2:bc:7f:b0:78:f8:18:ab:35:cd:fd:43:51:e1:
64:af:91:62:78:f9:b8:c3:38:35:c5:ff:37:2b:bc:
bb:2f:a1:89:7d:81:a8:f2:36:5d:9c:af:fe:ac:9e:
12:e6:94:2a:52:1a:09:35:cd:23:35:67:82:30:63:
4f:3f:59:28:2f:57:95:35:e0:57:ba:f7:6c:ee:21:
75:f9:ac:2b:4b:65:35:5f:0d:1e:c0:be:16:71:33:
50:4b:7c:c9:91:20:b9:36:0a:48:70:67:a7:c8:28:
dd:1d:64:f7:7a:52:52:33:35:8c:90:fd:b6:e1:ee:
62:84:b7:5d:04:22:6c:05:56:f9:6f:27:02:4e:15:
1d:cd:a2:19:ea:96:88:7e:d9:36:0c:83:9e:99:ba:
72:8f:4d:2b:4c:92:a4:7a:01:1c:65:af:a3:c8:5e:
58:f7:87:26:4d:79:16:18:ec:2e:92:9f:06:3d:11:
a0:42:2f:1b:7e:f7:88:a0:1c:1b:26:58:ba:87:6c:
43:31:f3:7e:ac:a0:8a:22:97:ad:ab:50:9a:49:4d:
ab:44:fc:34:17:b3:76:c2:c1:ef:a0:50:d4:a9:b3:
a3:76:fc:1c:11:83:fc:4b:06:37:d4:46:99:d8:21:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:9F:65:5D:DE:99:E1:B8:19:62:20:73:DF:6C:6B:DF:6E:18:A5
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:c9:be:6f:12:29:19:7f:1b:a6:4b:d2:7a:52:58:90:07:
9e:5b:11:e2:36:e8:d5:58:6a:ca:81:7f:3d:36:e4:97:b8:da:
5f:db:ab:0e:95:29:b0:f7:63:00:f9:95:96:84:23:f0:d6:42:
62:3d:c8:50:d0:ca:ba:c0:9c:92:23:82:2a:5b:08:2f:d7:9d:
05:89:60:13:a4:60:24:cf:82:1f:b4:94:c4:74:59:cd:cf:73:
83:38:d9:0e:a4:02:30:86:01:08:81:12:3b:cf:1b:3c:23:78:
a5:fb:ce:79:81:0c:b7:10:da:71:9f:6b:42:ba:91:18:9d:86:
5b:3f:2e:46:e7:a8:17:47:90:11:fa:d5:6b:ed:91:d7:a1:82:
7a:e1:d1:8b:0f:39:12:79:f2:ca:2f:ad:c7:d0:94:50:16:77:
8b:cf:46:c3:e3:3a:30:8e:c0:45:e5:49:4d:d0:3d:b0:fb:4e:
14:04:1d:15:b4:11:f5:b7:9c:99:18:e2:a4:a1:55:7e:a7:d4:
ae:55:cd:45:ec:16:5c:ec:24:3d:4c:08:6b:8a:02:9a:91:3d:
2f:8b:c6:9c:6f:8a:b7:de:43:8a:ed:9c:e1:a3:01:0c:09:22:
6e:a9:4d:a3:7a:a7:b9:7d:56:56:26:07:39:97:a0:1f:3e:ec:
c5:12:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:14 2025 by rpki-client