Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: c8jIzXNiaxnFXSiJWYWcO9LHiu2bXrojY8RQCMngeww=
Subject key identifier: CF:ED:92:3D:A8:F0:A0:20:74:AA:E7:BE:FB:26:54:F0:35:E5:34:5E
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01974BFB1C98DF0329F54F420405D953D65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 20:00:37 +0000
Manifest this update: Sat 07 Jun 2025 20:00:37 +0000
Manifest next update: Sun 08 Jun 2025 20:00:37 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: Ei/nGtdEbKr8yCwp2Ww6N5sXCgw7RhfEV90nA/9yj+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:1c:98:df:03:29:f5:4f:42:04:05:d9:53:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Jun 7 20:00:37 2025 GMT
Not After : Jun 8 20:00:37 2025 GMT
Subject: CN=cfed923da8f0a02074aae7befb2654f035e5345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:9c:5e:c6:41:d7:6e:8a:56:d3:40:6a:5c:
be:f7:08:69:dc:cf:13:67:67:77:01:e0:e9:a5:2d:
5b:2c:ef:27:66:7e:bc:92:32:f2:6d:15:f9:58:ad:
8f:e3:37:26:23:fb:5a:8d:5a:6e:41:a7:93:2c:63:
dd:40:b8:52:dc:99:6d:2a:e5:e5:d2:5a:6e:15:fc:
3e:6d:7c:91:57:ba:d4:bd:16:f1:61:c5:e2:0d:64:
f4:87:52:79:bc:e1:10:97:d5:2f:64:0d:51:b0:d6:
58:e1:48:e3:eb:ac:aa:6b:47:91:2a:63:f7:a1:11:
8d:8b:3b:d5:72:bd:8e:31:6c:e4:67:ac:44:74:8d:
c1:c0:7f:79:bd:7c:6b:59:18:a5:23:81:5c:13:fa:
00:18:84:e4:a8:e9:be:0b:3f:a9:4c:26:b7:52:e2:
fb:36:45:1a:6a:0a:6e:58:d9:4c:6f:96:55:d6:55:
cd:56:7f:d1:14:2b:59:1e:d3:03:7a:c7:0b:31:04:
e9:b6:8c:6f:e7:18:45:c3:c2:e0:e7:e5:5e:b6:cf:
b3:c2:5e:4a:83:f6:60:50:7d:90:89:15:38:a5:0a:
00:2a:e0:f9:45:3e:ba:e6:ea:3b:3f:40:44:fe:ca:
fe:73:96:47:30:2e:ab:a2:89:5d:d1:2e:bd:6a:2d:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:92:3D:A8:F0:A0:20:74:AA:E7:BE:FB:26:54:F0:35:E5:34:5E
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f0:1a:cf:a2:55:33:7c:a3:58:98:18:53:91:97:01:be:20:
85:0d:05:d6:48:53:25:0c:df:ca:22:61:db:15:28:19:45:3b:
52:ca:29:5c:c0:0b:66:ac:4a:77:d1:6f:74:f8:9a:23:fe:60:
cc:27:d7:68:7e:1c:44:79:81:97:63:5d:40:66:ab:43:df:3d:
54:b2:d9:a6:69:b0:56:d6:d2:e8:c4:7e:dc:f1:11:87:39:c8:
9f:77:0b:2b:50:6e:7b:ad:6c:d7:38:3d:85:5d:7b:36:41:00:
79:59:a5:df:7f:9b:6f:38:49:f8:6a:e8:1d:12:f0:1c:46:5b:
e2:a6:63:58:ad:13:e8:0b:03:62:99:7a:ce:9a:ef:ae:00:c7:
f5:fc:a8:6c:ca:5a:de:16:53:30:b8:fa:e3:88:ec:ef:ed:96:
d8:39:06:84:f6:23:b6:96:2e:59:a1:aa:9f:f7:16:78:02:e6:
35:7b:95:f2:32:ea:e6:bb:79:74:fc:bc:5a:de:6d:a6:9a:6f:
35:d4:f0:35:a7:eb:cd:65:4b:3f:9c:5b:07:10:48:64:54:a1:
cb:4d:65:be:82:b7:4e:65:53:bd:da:8a:a4:32:d1:ab:7c:37:
ef:dc:da:34:8c:b5:b6:d1:58:3e:3b:dc:fd:81:7a:8f:91:fa:
c2:c8:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:21 2025 by rpki-client