Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: 5ADaed2igCACL/rHXWe4mziT5yP+DUcibuQVjlrKBkQ=
Subject key identifier: DC:37:E7:41:F0:72:0B:F4:C9:D3:0E:9B:A4:8F:84:0C:18:6A:DD:45
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 0197458B480D055F4655639DC4E3C95AC726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 053B
Signing time: Fri 06 Jun 2025 14:00:45 +0000
Manifest this update: Fri 06 Jun 2025 14:00:45 +0000
Manifest next update: Sat 07 Jun 2025 14:00:45 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: JijdBfHNb7f7pvvvwqdI2//tB9HJzZDYG2gQeX0b72E=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:48:0d:05:5f:46:55:63:9d:c4:e3:c9:5a:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jun 6 14:00:45 2025 GMT
Not After : Jun 7 14:00:45 2025 GMT
Subject: CN=dc37e741f0720bf4c9d30e9ba48f840c186add45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:0d:b6:5d:66:b2:db:a9:69:77:4b:92:f2:
fb:ec:fb:ff:14:f1:05:11:81:1c:3c:2a:cd:d4:df:
08:e4:ee:ae:b4:81:e5:5f:db:96:54:3b:54:8b:d5:
f9:59:32:90:55:25:b7:97:99:45:76:82:f7:a6:bb:
29:cc:d4:43:e8:97:d8:0e:8e:ab:03:f4:6a:62:c3:
96:15:a2:29:3d:71:5b:00:90:e7:46:5d:95:8e:ba:
e3:6e:86:40:87:a6:16:02:ae:0d:31:c2:93:f4:84:
ff:2c:7e:9a:c0:50:1b:fe:66:4a:1d:de:2f:df:97:
37:11:b4:78:2a:f4:6c:28:1d:39:20:a5:3b:78:2b:
fa:c1:d0:bf:27:ee:20:92:14:9c:c4:17:35:8e:fe:
27:8c:91:4e:a9:70:a7:1c:37:5e:66:98:54:83:01:
cc:cb:de:69:fa:99:75:c7:ec:e4:2a:2b:53:cb:81:
a1:d6:62:4f:3b:ad:6b:54:50:01:78:fc:6a:b8:ff:
0e:c0:85:9b:b8:06:4c:99:d7:40:3e:86:24:72:0a:
52:26:8c:8b:33:df:18:c7:15:47:42:7f:81:b0:50:
13:08:06:fd:99:05:a4:b0:ca:0a:79:83:e8:bc:85:
52:1e:c3:49:d3:a1:f2:82:57:ba:5c:66:9f:3f:0a:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:37:E7:41:F0:72:0B:F4:C9:D3:0E:9B:A4:8F:84:0C:18:6A:DD:45
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5f:7b:48:7e:07:9e:5e:3c:40:eb:00:0d:15:57:01:b8:ca:
7c:ce:4a:be:63:04:50:ee:f7:b0:9b:01:be:9e:35:c8:8b:0a:
9c:d9:25:cf:0d:00:7d:52:84:7c:67:98:bd:84:35:57:d9:58:
90:26:78:c7:67:11:b0:b6:f1:9a:ea:12:b9:9e:ae:e5:28:f5:
23:81:bd:87:f5:09:fc:5b:ac:cc:ec:b7:ce:67:a4:8e:5a:99:
c0:e7:ac:dd:30:69:d0:6c:fd:03:38:7f:34:8c:d0:01:ba:87:
82:bb:c7:b4:e0:1a:c0:51:87:c5:ce:d3:a5:ea:a0:02:36:db:
1f:af:0e:50:29:90:46:db:ff:ed:a5:20:e5:6e:5c:47:c4:a6:
a1:39:bc:36:58:f4:e2:2a:67:d9:06:79:a6:89:30:3b:d5:49:
9b:39:72:64:ae:54:c7:a3:d9:a6:4d:7f:65:d6:6b:c1:c6:63:
8b:05:c1:4e:a3:86:58:3c:48:5a:2c:aa:9c:43:7d:3f:9e:7b:
cd:ae:8e:fa:10:ab:52:bb:e6:6b:46:fd:b6:fd:2f:c3:96:3e:
b1:1a:d2:89:50:5f:f3:a2:c2:fc:63:b7:6c:89:51:0e:20:31:
24:90:0e:4c:c2:95:d0:2f:e5:a7:84:05:88:4a:85:1b:39:95:
28:b8:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:41 2025 by rpki-client