Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: drzSy69Um/PmYTohvLLVy+ynpg7vPRtfosCszK1K45E=
Subject key identifier: 0C:9C:CD:A7:32:90:49:7D:27:48:55:D8:28:69:51:C8:EB:3F:62:72
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 01974A0CA17ED6BD1425D5CB7AA7E65AA6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 0445
Signing time: Sat 07 Jun 2025 11:00:31 +0000
Manifest this update: Sat 07 Jun 2025 11:00:31 +0000
Manifest next update: Sun 08 Jun 2025 11:00:31 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: l8i5L2DHaPikoKhLRpvf8EpEKQvOPO/Zs3bI4Vx/Gko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a1:7e:d6:bd:14:25:d5:cb:7a:a7:e6:5a:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Jun 7 11:00:31 2025 GMT
Not After : Jun 8 11:00:31 2025 GMT
Subject: CN=0c9ccda73290497d274855d8286951c8eb3f6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:66:53:9e:48:2c:d0:3c:85:51:52:77:f4:
95:e7:c8:d5:2f:3d:2d:5c:b9:9f:9e:d6:88:73:ef:
c9:fe:5e:d9:b3:7f:55:37:b7:ad:37:1d:56:15:5b:
0d:61:08:e5:c8:fb:2d:ac:0f:21:af:27:d6:a1:f9:
11:49:51:ff:7c:f5:47:de:6f:3f:42:cd:be:e7:77:
d1:aa:db:b0:b1:92:d7:9a:4b:f4:f2:38:d4:45:50:
a1:66:6b:ad:ed:a8:03:b2:bf:f4:3d:b0:e3:29:32:
98:69:5b:9e:72:2e:0c:3f:ce:e3:86:18:53:70:3e:
64:b1:1e:5d:51:a9:c5:65:66:84:93:00:7c:70:5b:
ed:ef:dd:fb:85:d5:f4:20:eb:bc:cd:e8:5f:bb:58:
c0:9e:ad:f4:88:9d:0a:9c:e0:8f:ae:9a:37:e1:e8:
7c:93:79:11:c8:e7:f2:f1:99:0b:56:3a:02:fc:b0:
03:7b:83:f3:0d:ce:6b:1d:1f:ae:ce:56:ca:81:68:
ce:fb:99:3b:f7:ce:42:d6:d8:be:e1:18:e8:dd:d2:
15:39:0a:3a:03:e4:a5:d1:6f:1d:0e:f3:94:92:42:
a7:e2:09:2c:07:01:95:de:50:d0:20:c9:6b:0e:f8:
1e:e4:01:bd:03:2d:01:f8:e4:fe:f5:6e:92:a8:6c:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:CD:A7:32:90:49:7D:27:48:55:D8:28:69:51:C8:EB:3F:62:72
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:1a:26:e1:80:1b:e0:45:58:b3:5b:b7:a4:9d:ee:0d:53:
04:0d:ca:3a:67:d0:00:1d:43:6b:80:a8:77:cb:b9:28:1a:62:
6c:0f:63:49:3a:ab:6b:3a:64:1e:c3:54:c5:f9:fd:00:79:52:
2e:9a:33:87:c6:d3:45:d1:12:9f:86:68:b7:c1:90:97:b0:3e:
e6:9e:c2:13:50:1b:42:03:34:f5:3c:b5:fd:9b:4f:eb:75:76:
cc:b4:1e:a3:fa:b1:1f:87:19:4a:9d:b9:ec:28:be:16:f8:a0:
0f:c6:2c:46:63:0d:d4:f4:a1:7b:fe:29:84:25:f0:48:48:4b:
de:3a:4a:9d:d2:17:0a:55:6a:8c:95:e5:cd:6e:51:4d:69:6b:
2a:dd:e3:e0:75:76:2f:ab:cf:d2:61:43:d8:90:06:eb:6b:94:
ef:37:36:f7:4f:88:0d:63:fb:54:53:01:d0:4a:9f:6b:8c:2f:
c3:e9:09:22:a1:30:05:ee:74:ca:8c:f9:a8:aa:a5:3d:85:27:
c5:2b:e4:fb:4e:e9:4e:05:99:1f:c9:b9:b7:65:10:fc:5d:52:
7b:df:a8:fa:b3:36:77:08:29:44:98:d6:e1:a4:52:7e:5b:7e:
d9:fb:4d:bd:a9:30:63:8c:c7:d7:43:14:32:5c:1e:a2:d6:75:
b6:94:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:19 2025 by rpki-client