Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: mwden6fxYRt9JVCOTRHSQnhznBGORuGsgB7wUUZYLCY=
Subject key identifier: DD:C6:D3:8C:88:13:E5:D0:C5:A8:AE:16:37:26:D2:27:36:A9:E7:B9
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 01974DE9F7155548C34C1D6A7E776AB7E427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:01:08 +0000
Manifest this update: Sun 08 Jun 2025 05:01:08 +0000
Manifest next update: Mon 09 Jun 2025 05:01:08 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: mJ8A5xmj7Yzax5s8xaQxhu72QVGrJF59DpSbc6ODT0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:f7:15:55:48:c3:4c:1d:6a:7e:77:6a:b7:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jun 8 05:01:08 2025 GMT
Not After : Jun 9 05:01:08 2025 GMT
Subject: CN=ddc6d38c8813e5d0c5a8ae163726d22736a9e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:d4:11:90:7a:08:27:77:32:71:46:98:a6:
9e:db:15:00:ab:41:3b:69:63:c9:19:ee:1b:f5:02:
89:d0:7b:f1:f3:c2:63:81:df:a0:4b:36:62:0d:18:
3c:c8:d3:b1:50:af:cf:08:1f:0c:c4:54:e1:67:7f:
77:5e:9d:c7:a4:bc:e7:c8:42:13:65:0f:fb:c8:98:
6e:4b:e8:d0:fe:4f:45:f8:9d:0c:0e:8b:ad:6b:71:
13:75:a0:fa:81:5b:79:d6:10:ea:bd:63:8a:1a:13:
e2:4a:6a:57:02:8d:52:67:58:ac:ed:8a:6a:80:be:
8b:39:40:97:93:4b:7e:37:8d:6f:eb:bd:4b:55:45:
fa:b6:bc:da:1a:d9:80:4a:93:30:c1:2d:de:73:01:
21:8d:51:4a:da:94:e7:69:3c:be:15:cf:0e:4f:69:
a6:d5:86:05:42:79:d0:0f:1c:b0:44:a5:21:c7:1c:
63:64:e8:40:72:e1:6e:6e:4c:54:63:f9:6f:2f:3c:
97:e4:ee:77:81:7e:7e:85:46:9c:77:bd:16:db:1d:
d8:61:74:e8:5e:96:95:cf:ef:ea:5f:5b:48:74:d3:
5e:67:ac:a9:ad:b4:b4:e3:8c:e3:2a:21:4f:17:64:
b2:b6:1e:e1:6d:85:22:7f:bd:3c:2c:28:bb:8b:8a:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:D3:8C:88:13:E5:D0:C5:A8:AE:16:37:26:D2:27:36:A9:E7:B9
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:65:86:b7:c5:c9:9e:48:4d:f4:30:b0:8c:48:a2:52:21:
e1:73:ae:e7:48:69:3a:76:c8:cb:ed:71:d7:20:ec:1f:5c:29:
d3:e4:95:1d:ab:ba:6b:61:8a:52:63:2d:41:00:33:ce:f1:b3:
97:ae:8f:dd:b2:5b:3d:47:ae:35:f6:41:21:bc:d6:fa:2b:8b:
d5:b8:cf:77:0c:38:e7:81:31:0f:b8:a9:59:0f:6c:ac:e7:98:
7e:7b:aa:ba:73:aa:5a:1c:ae:78:41:0d:15:73:70:c2:33:61:
9d:71:a9:51:fb:77:a3:15:3c:aa:75:b4:5e:ec:e8:e0:30:28:
d8:ef:34:61:22:b5:79:c2:c9:51:b6:4b:f5:98:aa:b4:9c:f1:
a4:ad:c4:22:5f:93:97:ff:83:dd:e3:19:bc:9f:43:ee:f1:be:
21:d1:d8:b1:3b:89:ec:be:fb:60:c8:c5:1c:d0:2a:f3:ab:d8:
1e:09:af:3c:e5:1c:e1:c2:37:a4:16:19:bd:75:46:e0:1a:40:
78:c0:d6:cd:e2:3e:ef:cc:85:7b:09:ce:91:67:ee:8b:d7:80:
07:71:86:40:9d:39:d2:f3:86:86:69:0e:2a:ed:4a:e8:10:6d:
70:4c:08:cd:c2:fe:8c:85:40:08:3c:0d:a8:61:05:45:bc:5b:
60:ac:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:12 2025 by rpki-client