Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: ZGBITeIEr4ukwfVLzfyQEK6AIVFo8Ncz/zMj6cG/cMA=
Subject key identifier: B1:65:F0:65:AC:AE:3E:D2:75:DE:8B:EA:BF:9B:78:E2:E2:1B:08:37
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0197402DCA90B46B9D1A5BBE641064B7F947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 148B
Signing time: Thu 05 Jun 2025 13:00:32 +0000
Manifest this update: Thu 05 Jun 2025 13:00:32 +0000
Manifest next update: Fri 06 Jun 2025 13:00:32 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: w8h5VS0NhyZnX3HP9H42QjBebRcAcILZW9tJvJXHPWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:2d:ca:90:b4:6b:9d:1a:5b:be:64:10:64:b7:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jun 5 13:00:32 2025 GMT
Not After : Jun 6 13:00:32 2025 GMT
Subject: CN=b165f065acae3ed275de8beabf9b78e2e21b0837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:8f:80:9c:bc:e3:0f:9e:dd:c1:8b:a4:c7:
f5:c5:52:98:ea:61:a5:9a:fa:c6:9f:0e:77:c1:3d:
35:d2:2d:de:bd:86:f4:33:05:3c:e8:69:7a:3b:ad:
f3:f4:df:fb:e3:94:2a:42:6f:82:ab:c8:49:80:51:
00:84:3b:7a:6a:5a:9b:b0:39:5b:58:89:f8:4b:71:
bf:e3:06:b5:e5:88:c5:ba:92:61:d8:cc:37:d4:6d:
60:52:37:d7:cf:71:9f:2c:ce:2a:02:49:b6:31:5f:
29:18:e7:56:e2:10:8b:ac:d2:70:63:72:a0:17:fe:
50:42:f1:72:30:2a:9e:2c:0f:7b:8d:55:40:de:d1:
c8:a9:01:68:4b:33:93:76:1d:8c:5a:b1:44:09:c4:
9d:61:de:ae:19:d4:3c:db:8a:ea:5e:1b:82:d0:2a:
38:6a:be:e5:ce:91:92:27:58:18:88:6e:28:26:a8:
bf:a6:67:74:6e:d3:4d:f2:74:fe:87:82:b3:29:13:
a5:dd:12:00:31:c2:9a:02:30:41:65:13:db:10:0a:
af:26:c9:6e:31:3b:4e:39:79:d5:48:b3:2b:77:41:
6c:43:bb:e1:59:68:4b:6b:50:29:ad:90:1b:3a:72:
99:3f:a0:d5:2e:84:75:12:49:1d:8b:01:ed:6f:1a:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:F0:65:AC:AE:3E:D2:75:DE:8B:EA:BF:9B:78:E2:E2:1B:08:37
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:b3:06:1c:84:f9:3e:b8:5c:e3:c7:28:ce:65:3e:8f:44:
7c:aa:b8:84:f6:88:ef:ed:33:3c:2a:3c:69:e7:94:4c:61:3a:
65:97:c9:01:d3:ba:ea:4c:05:1d:09:25:7e:39:23:58:34:7f:
f5:68:b4:38:f2:39:c9:75:03:72:9d:c7:6b:8b:07:a0:c1:69:
25:37:ce:b1:2e:fe:44:27:bd:a3:48:8a:cf:f0:4f:9c:3f:0c:
38:e5:3b:76:c1:b7:ec:52:1e:2b:e7:ca:35:b4:b7:ef:e2:d5:
3b:7c:61:e7:15:c3:50:c8:31:e9:71:b2:d5:fd:b6:00:29:1b:
1a:2e:72:49:5b:fc:7c:d9:e8:4f:40:82:f9:36:95:e3:0f:3e:
7c:74:da:ac:4b:74:cc:08:d2:e6:17:61:73:ad:9c:ae:30:09:
72:06:e0:4a:c0:2a:30:67:16:1d:16:5f:ad:61:fa:69:55:42:
47:4a:e0:ab:06:11:63:d1:d1:8d:2e:31:ce:da:b7:d3:b0:87:
2b:50:d1:58:f8:c0:c0:14:3c:a2:57:ba:e5:68:db:c7:a6:79:
70:ce:5f:56:60:da:18:69:87:be:20:f6:e8:d1:d3:b3:69:bb:
c6:c5:96:5a:1c:42:4b:c4:02:cc:e3:68:82:68:48:05:a6:e1:
c7:4a:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:33 2025 by rpki-client