Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: C7PbTUTUUCF5XZiAieGvch5qcL6qYXiRzAQnYNiY4ow=
Subject key identifier: 8F:D2:53:45:F3:CE:0C:4F:22:A2:03:25:D1:C3:C3:56:10:81:42:40
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01974A0C95932DCC53A30862F98F1E6C9C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:28 +0000
Manifest this update: Sat 07 Jun 2025 11:00:28 +0000
Manifest next update: Sun 08 Jun 2025 11:00:28 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: XMwG1wsdZyfgnzc8DwbltCbqw/mNzQx1QohiwuuyAmQ=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:95:93:2d:cc:53:a3:08:62:f9:8f:1e:6c:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jun 7 11:00:28 2025 GMT
Not After : Jun 8 11:00:28 2025 GMT
Subject: CN=8fd25345f3ce0c4f22a20325d1c3c35610814240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:93:3f:81:cc:33:2f:da:b9:d4:9c:3a:c1:
94:ea:65:72:9d:fb:03:7f:e9:90:e4:f6:d6:74:b8:
90:cd:43:f2:7e:c9:08:38:35:ef:af:fc:ff:09:a6:
be:6f:23:b5:33:fe:dc:c9:dd:1d:e9:97:85:d8:8d:
88:97:8c:4f:26:50:e6:f7:f4:be:95:ba:e5:71:47:
a4:49:79:2c:b5:39:58:46:52:26:03:86:67:75:62:
81:4f:b0:4a:48:30:58:e8:48:95:eb:0b:f2:3c:4e:
79:9e:31:17:d6:0c:da:0e:85:d1:39:af:fe:9b:af:
4d:a1:5f:59:c3:07:de:f0:1f:0d:f6:d1:78:32:46:
d3:27:e4:f8:7d:22:01:0d:66:3a:43:81:23:5c:d5:
87:e1:89:d8:dc:d0:3f:e0:4e:d4:2f:bf:d1:18:90:
ce:1d:12:dc:b7:78:d4:7c:35:f3:3f:cc:30:be:33:
ec:58:65:ab:3f:c6:32:41:7d:be:e6:f6:18:51:85:
b3:44:3c:f5:67:34:20:6f:67:94:a1:3d:2f:b7:4c:
96:f1:a3:12:cd:cb:6e:4e:d3:bf:c2:ed:00:ba:a0:
d2:8b:63:1d:d9:a8:3d:3d:27:9b:93:8f:8a:16:f3:
ef:94:f9:1f:20:b8:69:8d:38:98:fc:3e:fe:0c:b1:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:53:45:F3:CE:0C:4F:22:A2:03:25:D1:C3:C3:56:10:81:42:40
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:48:ec:45:7b:3f:59:69:b8:20:40:d1:d1:2b:1e:bb:af:
ca:58:1d:1c:34:8c:53:f0:92:fe:32:fa:50:1c:bb:5e:4a:ce:
f6:6f:c5:fb:8a:f3:74:82:fe:37:a7:3e:c6:ed:c4:4d:5b:f2:
6c:cc:22:df:f4:5c:4d:21:d7:21:69:c8:25:d5:96:1e:5c:b1:
ad:c9:3b:65:53:ee:cb:6b:35:6a:4a:cf:e5:cf:22:00:5f:b3:
c1:08:88:4a:52:8d:ff:2a:4b:5d:99:f8:14:d5:e3:98:43:79:
8d:35:8c:71:77:e8:28:00:e2:5b:ad:9d:c6:af:82:ff:6d:34:
a2:74:6b:b8:72:37:08:63:ad:89:c3:ce:d9:02:56:3d:85:dc:
cf:4b:ee:9a:43:db:af:70:e0:36:c9:85:c6:fd:36:9e:76:01:
6a:a4:af:f6:50:44:a1:61:a9:95:fe:6e:4a:23:ab:a7:c9:2d:
63:43:9c:63:15:de:06:f5:aa:6d:66:98:46:65:d5:f9:2d:a5:
79:c5:b5:44:3d:6b:ee:24:a1:f5:3b:bc:06:94:41:01:de:41:
28:ba:3a:d8:5f:52:e3:1c:7b:7d:05:c1:a7:6c:27:42:14:2d:
90:66:b2:5d:03:5c:54:0b:19:00:33:74:b8:fb:bc:de:93:0c:
dd:7d:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:04 2025 by rpki-client