Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: VSR+DK0B8wlOinY8U7O3D3IMXTR2YqNOzBt8Tk9B+NM=
Subject key identifier: 2A:6B:A1:9C:80:08:AA:B2:72:3E:1C:F2:05:5F:5B:66:3F:D9:F1:C9
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 01975A5BF10DB1CD775FF9AB0F5FF5BBEBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 158F
Signing time: Tue 10 Jun 2025 15:01:04 +0000
Manifest this update: Tue 10 Jun 2025 15:01:04 +0000
Manifest next update: Wed 11 Jun 2025 15:01:04 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: aRPw7ZuIQJDvirh8SKcjxQksdqkiJG8C7l+9S3gjVPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:f1:0d:b1:cd:77:5f:f9:ab:0f:5f:f5:bb:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Jun 10 15:01:04 2025 GMT
Not After : Jun 11 15:01:04 2025 GMT
Subject: CN=2a6ba19c8008aab2723e1cf2055f5b663fd9f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:ee:f2:92:5e:ed:f9:c0:92:ac:ad:07:4f:
8b:5e:73:ce:3e:cb:d8:06:47:08:1f:4e:62:cd:e2:
2c:e8:2f:cb:cb:1e:da:66:b1:26:17:47:6e:e9:0a:
66:ee:66:fe:0c:8d:01:0f:49:63:cf:fe:ea:19:6b:
97:d7:45:5c:02:09:4b:a9:79:5e:11:d8:bf:f9:75:
d4:94:dc:aa:e2:2d:ac:ea:65:ce:a6:56:52:0b:52:
4d:5b:88:78:92:b3:54:3d:4d:de:97:d9:ed:ee:bc:
f2:9b:f9:7f:b5:a6:2f:2a:2d:d3:97:c4:3d:36:2f:
b9:4e:ed:12:36:2d:55:77:5a:78:bd:ca:e7:cc:7b:
7d:3d:e2:09:10:e5:5c:be:18:7b:49:01:30:e7:30:
61:08:60:84:11:5f:2a:ea:7f:29:c1:41:4a:68:ac:
e1:d6:5b:a0:d9:9a:a3:2a:0c:d8:e0:fe:77:b2:4e:
bd:99:b7:de:0c:ca:07:aa:47:a3:0a:65:45:64:08:
4c:09:32:4d:7f:bb:07:46:0e:d3:6a:a7:37:6c:32:
46:74:bf:29:d5:2b:54:89:5e:96:20:4a:69:24:dd:
b2:43:1e:c2:30:d8:84:0d:3a:e6:8d:22:4c:95:2e:
7f:6e:e8:ab:cc:04:77:10:65:65:96:ef:98:14:a6:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:A1:9C:80:08:AA:B2:72:3E:1C:F2:05:5F:5B:66:3F:D9:F1:C9
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:5e:a1:f9:0a:c2:6e:41:2a:83:9a:86:7e:ac:80:01:5c:
98:d4:08:2f:a4:53:cc:54:bf:1e:6b:1f:b5:6a:9d:d8:98:a4:
50:08:c3:6d:d4:07:86:52:3b:2a:21:f5:23:3f:d7:66:35:25:
bb:de:73:71:3c:dc:70:7a:3b:a9:5e:2b:88:02:f8:ab:85:b0:
2f:43:d7:16:19:fb:78:8c:96:34:b2:e9:b9:86:c9:38:87:16:
e4:d5:e8:9d:cc:3d:7b:84:df:06:ec:9b:18:e8:b3:c1:7d:c6:
08:a0:9a:4e:1b:7c:8a:dd:ad:6e:b0:7f:89:78:1f:46:15:a4:
ec:02:25:17:96:65:fd:21:ab:db:47:f9:65:da:6d:7f:ef:82:
c6:d8:fb:b6:25:39:fd:42:bc:58:6e:dd:a3:5e:75:da:54:eb:
f0:bd:56:1e:93:c7:2a:9f:cd:c6:03:e7:5d:00:b9:ea:7e:58:
89:0d:7c:3b:ca:20:52:b3:21:6a:21:2c:76:d5:58:68:02:32:
b0:42:67:95:6c:4b:94:7a:e8:49:a6:4f:9d:bd:f7:b6:a2:07:
ac:82:bf:a5:05:fd:13:cd:ea:e8:d9:a8:ff:57:c8:8f:fd:d7:
a7:81:cc:20:f9:b7:cd:d6:cb:dd:45:c9:8e:63:d8:b6:d5:68:
72:b3:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:58:10 2025 by rpki-client