Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: wlwsAoy5MTIsE1qFVjhcIi6bP2NSDT2sAanVIGfLegI=
Subject key identifier: 75:41:DA:D1:1E:98:FA:50:0C:88:98:62:A0:A7:A0:68:38:30:D8:FD
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 01974FA126918DF58CBD2EA2B36B95B57009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0968
Signing time: Sun 08 Jun 2025 13:00:50 +0000
Manifest this update: Sun 08 Jun 2025 13:00:50 +0000
Manifest next update: Mon 09 Jun 2025 13:00:50 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: 0QDiuUgtRzErDv4XvuW1THwY7/cdghpnf5ca0D74TeQ=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:26:91:8d:f5:8c:bd:2e:a2:b3:6b:95:b5:70:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jun 8 13:00:50 2025 GMT
Not After : Jun 9 13:00:50 2025 GMT
Subject: CN=7541dad11e98fa500c889862a0a7a0683830d8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:d6:8e:49:7e:a9:72:3e:a1:57:b0:f0:1c:
da:f8:7d:9c:28:17:f4:c4:f1:c5:9e:b4:94:98:66:
32:9b:b5:db:be:cd:23:bc:b6:7e:4c:77:9a:ce:96:
28:ab:c6:be:a4:ce:a2:68:03:95:99:8c:d1:cd:c7:
0b:e8:42:51:29:70:f9:8d:89:45:e7:86:bf:0f:b4:
b9:df:b0:fb:63:d0:d9:f4:87:42:69:ec:b5:bc:bf:
e0:e8:8b:c3:63:00:65:b1:8d:8f:b5:3f:dc:f9:b3:
0f:2b:71:5f:da:db:a0:db:bf:49:3a:83:b2:09:98:
65:66:3a:8c:c2:6d:56:05:44:a5:7e:21:1e:15:b9:
58:da:db:95:02:df:a3:d3:8e:90:47:78:28:6e:b9:
cd:63:1f:5c:98:07:6a:f1:19:68:f8:1a:28:37:b8:
72:4b:8c:40:f8:48:fb:4d:6a:c4:3d:84:f2:31:59:
70:2d:2c:ae:f5:9a:26:00:97:f4:b3:35:bc:e3:63:
60:b2:49:a4:65:2f:66:fa:20:5c:e2:85:be:8c:81:
ca:de:09:22:3c:02:94:bc:04:a9:3e:4d:fe:c8:e0:
f1:e9:94:5e:ef:dc:26:7b:7d:60:94:86:10:6e:ba:
dd:88:f0:0b:ed:b7:93:92:f1:d5:29:4d:58:fa:8d:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:DA:D1:1E:98:FA:50:0C:88:98:62:A0:A7:A0:68:38:30:D8:FD
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d5:9e:f2:41:6f:15:96:8c:62:93:bf:0f:6d:de:73:d0:35:
64:7b:f6:aa:7e:bb:e2:8c:90:49:2a:da:f6:67:fc:6a:da:41:
6b:56:34:57:53:23:52:1f:d8:20:93:64:ef:48:8d:c8:c2:04:
13:6d:c4:a1:88:0c:5a:7f:1e:4f:a7:11:8b:88:ec:ba:68:8e:
e6:85:69:c6:cf:f4:a4:47:97:a4:88:33:50:e5:fc:cb:ba:f4:
93:0c:8b:b7:78:45:d1:40:f0:93:4e:da:11:7e:cb:b2:bc:de:
26:80:0f:db:bb:bb:b0:0f:33:e9:9a:1f:97:9c:04:6d:64:45:
d3:d5:a5:76:08:51:97:40:fa:7b:52:ef:9b:91:64:69:90:84:
35:37:06:d8:1f:33:a8:43:71:ad:f0:7a:8e:72:ed:a9:8f:68:
70:1b:6f:5d:69:b5:df:fd:ef:3d:de:5a:69:93:2d:e2:0d:0a:
e2:78:e3:36:4d:1f:9b:15:89:2b:fa:4c:64:53:2e:35:07:70:
a9:aa:3c:0d:03:ef:fb:57:82:73:16:ca:b7:63:60:2d:83:4a:
e0:b0:f4:b2:5c:88:eb:a6:0a:83:8f:b5:43:5b:7f:a0:37:25:
f7:d0:1b:fe:9f:ff:87:41:22:76:4b:34:03:d3:a2:84:ae:d0:
e8:e0:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:01 2025 by rpki-client