Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: deHOCHRHsOBvpJhJ+lHA3D4KJ2fcRuzsCgo8Viozx7A=
Subject key identifier: 5A:6C:3B:83:82:21:01:9B:86:3B:69:40:58:C0:50:E4:20:71:34:E9
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 01974E8E82AD8C7A729D4F8B7C6F9EB7EC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 0265
Signing time: Sun 08 Jun 2025 08:00:51 +0000
Manifest this update: Sun 08 Jun 2025 08:00:51 +0000
Manifest next update: Mon 09 Jun 2025 08:00:51 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: 0OXBLXtAMqWvdlqx8jRcAKedrwfKABk2ATFK4GVPrlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:82:ad:8c:7a:72:9d:4f:8b:7c:6f:9e:b7:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jun 8 08:00:51 2025 GMT
Not After : Jun 9 08:00:51 2025 GMT
Subject: CN=5a6c3b838221019b863b694058c050e4207134e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:2d:e2:42:8e:35:31:43:81:69:8b:86:d9:
a7:41:21:5f:3a:e7:26:2b:2f:8d:f5:15:cf:87:79:
c7:06:8d:e3:0c:a7:9e:35:d5:ca:08:71:da:03:04:
c8:cd:87:b3:0a:60:6a:7b:87:10:69:6a:f1:f9:e8:
00:e8:ce:bc:f2:d4:37:78:91:75:5f:76:65:43:42:
3a:77:fd:ce:82:89:a8:c6:29:53:5d:d5:7f:bb:cb:
e9:da:6b:d0:cb:bf:5e:03:1f:cb:8e:65:a0:69:02:
ab:a4:76:6a:38:c9:ff:61:18:a6:56:52:a1:04:13:
2c:a1:d8:e4:68:4b:3d:98:20:90:46:a2:76:9c:22:
f2:08:4d:25:bf:84:90:f0:45:6e:33:7c:29:90:52:
49:a6:89:89:48:fd:49:f8:2c:fa:57:06:3a:38:69:
e0:c1:69:5e:e4:24:02:4e:6e:ea:23:e6:bb:7c:66:
05:a8:ca:b2:98:dc:dd:53:b4:db:32:87:a5:6f:4a:
91:ae:8d:17:30:7a:7d:f8:87:67:27:18:02:1f:b8:
bb:17:a7:27:f6:ec:c4:61:ab:f7:1e:f7:17:e1:01:
4e:53:26:f4:41:fa:ac:98:a4:56:88:da:4e:4d:e9:
78:c2:c4:3d:75:12:8e:5f:68:5e:e6:c1:57:f1:a0:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:3B:83:82:21:01:9B:86:3B:69:40:58:C0:50:E4:20:71:34:E9
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:b0:b4:e5:ae:93:80:a5:7f:65:a5:4f:39:cb:aa:c6:e6:
c5:d1:a9:0f:f6:d2:5a:98:e0:c8:57:6e:c7:e0:9e:22:5a:dd:
ee:39:58:92:47:29:7c:2a:8b:db:ff:c8:90:cb:f7:70:ec:be:
20:b0:e9:af:87:ed:9f:cc:31:85:64:b3:32:18:ed:5a:f4:60:
c5:17:66:de:1e:d6:2d:b7:ff:7d:18:e9:3d:f9:fa:60:04:9f:
95:69:e1:7f:67:f5:36:03:a8:27:a2:88:65:6c:75:c6:6b:22:
7a:52:ce:48:0f:c8:6e:78:8c:87:9e:4f:44:45:87:9a:7b:bc:
61:19:d6:6f:43:e6:89:d9:a0:89:c4:75:4e:9f:8e:d1:34:40:
e7:95:e5:f7:fd:50:24:54:cc:81:ef:ef:81:d8:cc:86:58:56:
b8:b7:3d:9a:bb:96:a6:8b:98:a5:91:4d:0e:10:3b:d4:f7:a7:
4c:0e:da:df:62:8e:4e:7c:2e:eb:79:85:26:c8:b5:3e:1d:47:
50:df:02:e4:4d:3f:ba:65:45:9c:1f:46:2e:28:89:48:6a:1e:
55:da:82:d5:0c:fb:5c:4f:77:96:0a:49:6e:65:be:09:5a:27:
f1:93:bd:f7:4c:70:46:2b:a1:50:d8:e3:a1:7d:e3:f5:08:ff:
09:a4:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:11 2025 by rpki-client