Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: nK4m1Rw0EjVRWnY0kTP3ntYgeaHKGSXAGcBryQEWdlA=
Subject key identifier: 97:63:67:6E:39:84:BC:7D:1E:54:AF:AB:6C:94:BC:A4:CC:CC:4C:8E
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 01975D9346683339D3FF19639EEA796D4B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 06:00:22 +0000
Manifest this update: Wed 11 Jun 2025 06:00:22 +0000
Manifest next update: Thu 12 Jun 2025 06:00:22 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: /OmoPbl/AjqAuZKbiGbiSz4bvRJX6D7ByLopGDSnlV4=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:46:68:33:39:d3:ff:19:63:9e:ea:79:6d:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jun 11 06:00:22 2025 GMT
Not After : Jun 12 06:00:22 2025 GMT
Subject: CN=9763676e3984bc7d1e54afab6c94bca4cccc4c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:e8:fc:04:32:37:ac:7e:83:b5:57:4e:22:
91:f3:fb:82:46:27:75:2f:16:46:e8:9a:3a:0a:af:
88:f4:21:0b:ff:d6:83:e2:67:d0:8f:af:79:a7:42:
5e:29:e5:bf:01:cc:e8:d9:ae:41:2f:cc:21:5d:75:
f5:5e:d9:02:b5:89:ad:d4:d1:86:93:99:c8:d6:10:
0c:ed:d9:b7:c3:c7:a0:3f:a8:3e:ca:bc:cd:4a:53:
2d:b6:2a:43:c9:e4:e6:be:7d:80:ca:85:61:0a:ea:
29:66:60:34:4f:c8:9c:43:b9:6e:12:0a:6a:36:c9:
73:c7:1a:a1:df:a8:4f:5d:c2:66:13:e0:0b:2f:87:
4d:e3:ea:aa:3e:93:48:24:1d:ff:0c:91:5a:45:28:
b8:cf:32:24:ff:1b:ac:26:39:cf:e9:87:48:86:20:
0b:4c:b5:f0:b3:a1:9d:7f:79:81:62:a3:c8:10:e6:
2e:03:d8:44:fb:19:7e:dd:a2:ac:de:d5:77:78:45:
62:fb:45:fe:c5:bc:cd:eb:db:71:ea:a0:33:7b:61:
cd:97:57:3c:b0:79:91:7f:67:35:3c:e4:53:95:3d:
bd:2e:fd:15:f5:be:92:64:1c:db:ff:2f:a5:b3:50:
2e:ec:74:78:cd:e2:81:87:6c:8c:74:cb:19:50:18:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:67:6E:39:84:BC:7D:1E:54:AF:AB:6C:94:BC:A4:CC:CC:4C:8E
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:f8:3b:05:2b:46:29:7b:7b:88:10:e2:d1:1d:3f:3e:62:
1f:6b:8c:cc:80:c3:54:48:7e:5a:3c:8b:bd:be:d1:ae:a1:26:
ba:03:f9:d8:3e:82:d7:85:bf:64:86:4f:b8:1d:d1:a4:15:03:
d4:e8:2c:3e:7a:bc:6c:03:0e:55:9f:af:31:1e:16:93:2d:e9:
b7:7d:4d:66:84:fe:8b:da:4e:95:0a:fa:7d:a1:b3:34:4c:75:
84:d7:0b:fc:82:0a:a7:24:1a:27:bf:d0:35:fb:2e:43:fc:b0:
43:b3:8b:06:42:84:67:1d:3e:de:62:b1:e8:13:8f:e6:4f:0b:
91:58:ec:77:e1:d1:3c:6f:bd:19:39:ec:8e:ce:d5:fc:7c:0a:
72:ad:f8:17:ff:f8:8e:55:1f:00:34:be:38:cd:29:04:06:00:
07:d9:89:46:6b:08:25:24:3c:82:9a:74:cc:30:18:64:29:23:
90:1d:b7:c3:24:bc:bc:79:6b:e0:aa:1d:84:b1:de:2e:f7:0a:
19:4d:84:e9:9d:5b:3f:b8:67:62:c1:b3:57:4e:88:ee:70:d0:
41:09:3c:84:ea:eb:92:4b:5a:6a:61:66:ff:80:5d:15:02:66:
14:21:49:5d:16:f0:81:9a:a7:07:17:74:64:57:a0:dc:60:2a:
42:52:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:10:12 2025 by rpki-client