Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: UD8nDIq+sb54BegyKWEYV5QwdOlQb5m725h+aFNzTSE=
Subject key identifier: 06:13:7B:E6:0A:3A:EC:9E:F0:D2:6E:EB:A9:FA:66:34:5D:09:47:DF
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 019849D38E3608DCFC248E93F1DDF1941ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: cq2RzyOzseQ/1R70HHjFH7kYBFo3iUwmER36ZLvz13A=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8e:36:08:dc:fc:24:8e:93:f1:dd:f1:94:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=06137be60a3aec9ef0d26eeba9fa66345d0947df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:51:1a:8f:e3:31:80:73:16:19:22:89:fd:
bd:c1:f5:03:24:b4:f8:e9:af:62:d3:3f:bb:7c:05:
bd:1b:2e:8f:a2:99:f9:be:fd:30:f3:a4:6c:34:11:
ab:27:85:11:b6:df:d0:49:5a:f3:eb:34:cd:de:29:
70:0d:24:32:c7:52:23:1d:bd:98:8f:49:19:4e:37:
6f:1a:f0:f2:e1:69:ca:c7:44:8d:55:a4:8c:15:a2:
0e:8a:23:c5:a0:de:c9:c1:38:fe:8e:64:6f:02:f9:
28:d9:28:f5:92:45:ad:be:19:d5:f0:53:00:72:2f:
92:2a:26:0a:5f:4f:2f:24:27:0f:29:9f:19:fd:cc:
3c:96:c4:d7:52:b5:f5:4e:a5:82:83:fe:c1:37:d3:
30:e6:21:9d:56:27:29:75:b5:38:ab:7a:02:b5:4e:
bd:18:eb:6c:33:f6:b5:7d:80:53:72:f4:dc:75:5e:
92:67:d3:39:13:4e:4e:68:db:2e:f1:40:aa:e3:8c:
d2:97:f3:9b:51:ee:48:a7:dc:41:e4:11:42:62:11:
e2:aa:40:9f:fd:8f:fd:a9:c5:82:9b:f6:ef:85:64:
85:0a:12:7b:b6:ce:9b:67:a7:c2:ee:b1:bc:6c:76:
a5:88:fa:ef:31:5c:3a:ba:32:d1:13:c7:28:38:56:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:7B:E6:0A:3A:EC:9E:F0:D2:6E:EB:A9:FA:66:34:5D:09:47:DF
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8f:79:e1:86:2d:d9:fd:bb:05:57:45:8e:d0:4b:af:ee:c5:
09:87:80:b8:d2:82:45:f3:e0:76:a8:f9:f1:65:f9:59:3b:c1:
dd:d9:67:61:a0:27:e0:14:b7:ca:25:e5:44:9f:c7:83:4a:e1:
e0:29:53:16:2a:25:2f:43:23:d9:6f:94:c6:c5:26:e6:7a:d3:
f7:51:5b:58:a8:b3:42:73:c9:9f:88:5f:eb:e8:20:52:fb:c9:
ba:67:e5:70:7f:50:8d:12:3c:d8:12:1c:fd:ca:30:cc:b0:09:
0e:00:b1:64:88:5c:1d:72:d5:4f:e8:dd:b5:42:11:92:64:0a:
13:db:14:e6:d1:27:78:a4:f0:f9:b5:9d:a0:26:e3:01:6d:0b:
e1:a7:18:f6:df:43:7d:ac:f8:cb:27:cd:7b:fd:fd:90:d8:4c:
54:30:bd:22:c0:0b:54:16:d8:59:84:eb:47:af:62:49:d3:41:
3c:9a:a9:a3:f2:61:1e:83:ca:e6:06:d8:a2:a5:eb:fe:de:e8:
c0:01:fe:2a:f0:5f:9a:df:df:df:08:32:d3:18:2d:39:94:fd:
22:59:35:9e:cf:7c:14:8b:87:f7:8d:da:ff:90:bb:05:54:b4:
07:33:f4:31:96:22:95:bf:f5:f7:e6:60:28:08:91:e5:c1:b3:
34:a2:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:28 2025 by rpki-client