Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: BbfohRH2feZEuHrshC2957V3xLBD0uRZt+RsJ8gCNwg=
Subject key identifier: 94:71:9D:AF:42:00:F0:5B:87:C1:70:D4:64:90:D9:05:57:17:D9:26
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 01974E8E74D7099E9507E765BFE2AF7390D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0BAA
Signing time: Sun 08 Jun 2025 08:00:48 +0000
Manifest this update: Sun 08 Jun 2025 08:00:48 +0000
Manifest next update: Mon 09 Jun 2025 08:00:48 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: 4ht9FvHMo+XsdFznYvEUNSNIYnod8syaDF84FYasj7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:74:d7:09:9e:95:07:e7:65:bf:e2:af:73:90:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Jun 8 08:00:48 2025 GMT
Not After : Jun 9 08:00:48 2025 GMT
Subject: CN=94719daf4200f05b87c170d46490d9055717d926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:21:a9:84:0a:51:7e:74:06:9c:08:29:5c:
a1:c4:2b:19:82:f7:8c:d8:dd:3c:f2:7b:12:b3:46:
ce:3a:d2:6e:ad:f5:ac:9c:6c:4d:3f:22:42:27:98:
fb:27:3f:c4:66:dc:9e:70:12:11:68:41:fa:53:4b:
7a:c1:73:95:95:b6:05:a3:63:22:5e:0b:ce:1d:39:
1f:34:be:3b:0b:cd:67:d0:db:64:c5:d6:c8:ba:b6:
8b:fd:c1:06:68:d6:85:03:0f:79:75:1d:65:0c:89:
b8:77:9b:15:60:98:01:41:a3:e4:9c:fc:29:0a:46:
00:4f:d4:8e:0e:cf:9c:09:90:29:1f:be:5f:11:60:
b3:c9:21:eb:08:3d:8f:13:36:0a:6b:88:38:5e:d0:
eb:c1:1a:c1:d8:9c:af:35:91:76:6e:d4:c3:de:c6:
ca:e4:7b:21:b5:77:14:6a:84:21:4f:b8:c4:73:61:
9d:09:23:8c:41:d2:48:3f:57:de:c8:90:c9:99:ed:
cc:0a:c6:96:8d:c7:bd:96:6a:02:bb:c7:55:3e:e9:
3b:ee:39:35:39:9e:84:43:6a:fb:c3:ff:4e:d2:b7:
c1:47:fc:c3:cd:68:3e:dc:a2:fd:2a:57:1b:53:22:
01:00:f3:3d:89:0e:81:bd:15:d3:d1:15:10:b1:7b:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:9D:AF:42:00:F0:5B:87:C1:70:D4:64:90:D9:05:57:17:D9:26
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:3a:04:1d:f7:62:e5:ef:91:e1:6b:98:ed:92:82:a2:49:
9d:58:76:a5:79:1a:b5:c4:65:f4:0f:57:21:cf:ea:c0:78:3b:
10:90:aa:ad:5e:4b:5d:27:cc:81:cf:ab:fe:b2:d6:e4:e0:35:
ff:d6:08:b8:98:36:0b:29:20:f9:18:8f:b1:75:65:a9:07:31:
d3:b9:cc:6d:bb:36:8e:fe:1f:a5:99:c3:39:f2:60:a1:ec:43:
2e:5f:10:ee:62:16:6c:f9:90:2e:6c:5b:0e:2d:01:2d:3b:4a:
f0:7c:df:76:b1:13:a7:86:c2:92:df:cd:13:ca:e0:65:10:f6:
77:8f:4f:74:cb:24:6a:58:6c:af:b0:b7:32:df:98:fa:95:7d:
6b:07:ae:8f:c8:b3:7d:ab:29:53:ef:d0:bb:65:1a:e4:da:da:
2a:26:93:1e:50:34:35:62:98:40:c8:29:2b:4e:d6:4d:f8:2f:
d3:df:87:24:37:10:7a:71:95:55:20:60:02:18:b2:ea:9f:9a:
a5:52:6b:df:dd:06:86:76:dd:d2:87:7c:d0:f2:4c:cf:5a:26:
ca:fe:1b:d0:fc:0d:c0:e0:a4:5f:9e:da:b0:9f:df:09:e2:27:
6b:1b:16:46:17:83:79:03:ca:13:97:b6:0d:d4:c2:c6:07:3e:
ff:c1:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:58:08 2025 by rpki-client