Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier: fJR062tC8y7nd490d9BwGVSDtujyD2JaRW96Guj9ths=
Subject key identifier: 72:EB:77:BD:AC:2F:55:D4:B8:21:A5:AB:EB:DE:0E:49:43:C3:CF:BB
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01974D4530C2F09956AFA5B5FB1AE6F517B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number: 0DF4
Signing time: Sun 08 Jun 2025 02:01:09 +0000
Manifest this update: Sun 08 Jun 2025 02:01:09 +0000
Manifest next update: Mon 09 Jun 2025 02:01:09 +0000
Files and hashes: 1: IfVj5aDzwI_pIfsi19tG8SlhNUU.roa (hash: 6w13xfZ6L14mhKJP/CtzgVaPjgCMlMEt5Ve3cKKBCSc=)
2: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
3: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
4: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
5: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: 4fipV0aKphSpym9fTmkIQ+ScrkdE6DMAgqxgaH1f7kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:30:c2:f0:99:56:af:a5:b5:fb:1a:e6:f5:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jun 8 02:01:09 2025 GMT
Not After : Jun 9 02:01:09 2025 GMT
Subject: CN=72eb77bdac2f55d4b821a5abebde0e4943c3cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:e2:e3:db:d9:0a:36:ef:b2:6d:84:f1:14:
08:33:e6:a6:ce:37:bc:4c:35:7c:0b:2a:56:55:53:
00:75:d4:74:50:06:fa:52:6c:05:90:68:1d:0e:2b:
3f:a4:b1:a9:a4:4b:62:9c:bf:47:61:f7:96:5d:6d:
ee:79:33:09:95:d3:6b:c4:a2:34:94:3a:77:37:8a:
2e:fe:8f:7f:7f:79:3c:f2:9b:bf:e4:22:1f:c5:7f:
93:72:ae:40:61:31:56:4c:4d:e9:17:09:84:e9:07:
ac:1e:34:ec:3e:9f:47:f1:d4:e7:cb:b4:71:0c:b4:
71:dc:7b:a3:2b:13:ad:5b:ce:99:8f:ba:b1:b2:fd:
7c:f7:64:ce:2b:30:9e:b7:84:2d:14:93:67:00:a6:
43:fc:87:9e:dc:df:d4:78:81:de:37:ed:b7:52:67:
a7:5e:95:9f:00:b5:97:d5:a8:1e:01:31:6c:a8:4b:
17:d6:9c:3c:b4:d6:70:b9:cb:81:28:d0:fe:fb:6f:
e9:82:67:34:8b:02:32:69:00:20:bd:4a:53:81:da:
d7:4b:33:9f:81:84:93:48:bd:81:bf:5b:10:e5:b7:
59:e7:0e:0e:35:b0:73:a8:fe:21:e9:b0:21:3c:b4:
7c:7d:26:90:ee:cb:7a:84:f2:a8:da:74:72:da:6c:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:77:BD:AC:2F:55:D4:B8:21:A5:AB:EB:DE:0E:49:43:C3:CF:BB
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6c:87:00:bc:dc:e1:03:cf:91:a2:64:d2:03:bb:2c:c2:a2:
06:73:88:de:04:19:92:4e:91:b0:7c:92:12:0a:18:03:b7:4f:
20:18:f1:cc:01:06:ec:58:44:c5:eb:25:9a:13:00:3b:99:f2:
fa:c6:a4:0d:16:43:a0:99:eb:43:7a:cd:43:cd:99:c4:ed:6d:
b1:45:5d:fe:70:ff:a8:e0:83:31:18:97:ce:00:97:87:69:71:
4f:73:49:29:26:f4:07:b5:44:7a:7f:5f:03:78:bf:f0:1f:b8:
a7:17:16:fd:10:13:51:83:a1:aa:c9:89:06:64:cd:af:40:19:
29:4c:28:8d:17:9d:cb:f0:a7:17:0c:f2:18:1b:98:55:e6:10:
1f:f4:3f:91:d4:9d:e7:aa:2c:89:b9:4a:78:0a:e0:0f:aa:c7:
ab:e8:19:ba:d5:07:31:05:f8:90:95:42:79:5c:c8:f9:0c:07:
43:8a:49:7c:18:02:b2:61:07:ec:2e:ef:df:e4:4c:b1:42:73:
e4:4f:8e:85:be:23:7c:d8:43:19:f5:82:20:95:58:19:3b:f0:
f0:6b:59:71:b1:94:8f:2a:64:a4:b4:69:ed:bd:03:04:ed:f7:
18:e3:fb:53:34:6f:36:2b:40:28:e7:a5:4a:6a:38:80:67:3a:
d4:c7:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:40:48 2025 by rpki-client