Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: LWoYG19h7oR75ZSCrLQCft8AEJuAJxy70JMhq9a+58Y=
Subject key identifier: E8:75:CB:BE:13:41:4C:E8:1E:2E:CE:0E:54:B9:5F:45:B2:A5:90:DC
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 01975E38F90E3A4BC720C61A7AFBEB0FEF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1591
Signing time: Wed 11 Jun 2025 09:01:21 +0000
Manifest this update: Wed 11 Jun 2025 09:01:21 +0000
Manifest next update: Thu 12 Jun 2025 09:01:21 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: pPq0x74FvYjCmOnFxrkfEInvTA7f4lGov7TGb/iqoJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:f9:0e:3a:4b:c7:20:c6:1a:7a:fb:eb:0f:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Jun 11 09:01:21 2025 GMT
Not After : Jun 12 09:01:21 2025 GMT
Subject: CN=e875cbbe13414ce81e2ece0e54b95f45b2a590dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:7b:a7:06:cc:f5:48:b8:e3:ba:43:68:c8:
aa:3a:60:a9:e8:c0:7b:03:0b:ea:45:6b:c6:f7:4a:
05:89:70:fb:6a:aa:e6:12:6c:7f:0d:32:c6:9b:96:
11:ee:30:14:1b:69:34:27:7a:f6:c4:ea:6f:54:8a:
46:71:63:f0:e0:6f:f5:ed:4c:01:12:68:f9:7b:c1:
f7:4e:d6:70:52:45:82:99:81:4c:f3:39:7e:3d:10:
a6:45:eb:31:42:1e:1c:d9:3b:90:81:1c:bb:d9:9d:
9a:b0:53:4b:eb:45:cc:82:d8:4e:b5:a9:9f:c1:7e:
fa:df:32:d3:b9:2e:57:41:a7:4a:e2:47:f3:e4:e4:
35:0e:a6:c7:c9:d7:86:13:dc:60:28:e5:86:40:5d:
cb:8d:2f:22:20:b5:88:d8:c2:6b:3f:57:98:99:b8:
dc:47:1a:f7:20:67:13:51:a6:50:a7:ad:f4:ed:be:
31:1b:94:c2:92:ba:41:93:38:04:85:b2:0c:46:c6:
47:0a:93:c6:66:ed:d6:40:6c:ae:66:46:af:0c:df:
02:4c:2d:d3:02:2e:38:6b:2c:2f:df:e0:5e:7f:4d:
41:20:3b:cc:fa:2e:f3:dd:3e:6c:f3:0f:5c:4a:2d:
05:f2:a7:40:58:1e:27:06:d1:df:8c:61:95:7a:99:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:CB:BE:13:41:4C:E8:1E:2E:CE:0E:54:B9:5F:45:B2:A5:90:DC
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:3a:c2:bc:31:84:0e:ae:39:14:a0:88:00:cc:0a:88:25:
dc:96:02:07:bd:42:48:90:8e:e0:84:15:fc:49:8d:f4:26:04:
47:33:ee:e6:94:30:4e:42:54:b0:08:95:6a:af:bb:a0:2b:54:
fc:cc:bf:2a:4d:c5:29:95:65:ec:65:c3:a6:f5:f3:c5:29:c3:
e7:2f:45:f1:ea:81:8b:6e:93:ff:c0:de:4d:ed:80:34:f5:5e:
1b:0e:5e:b0:e5:91:6b:e8:35:f3:f0:82:a1:2b:28:c3:ec:da:
53:d9:92:46:7a:e8:90:8a:fc:00:50:d6:3b:37:4d:dc:54:17:
3f:55:c8:e6:4c:f8:02:ed:13:b5:25:5e:99:10:0d:60:57:35:
ee:36:7d:a4:13:67:9f:a4:2c:0c:c4:13:b6:9f:ff:c1:90:f8:
54:6a:df:78:e2:69:33:3c:b1:5a:37:fa:53:62:92:9a:9a:86:
cb:e5:5c:54:43:dd:cf:e9:21:01:6f:31:30:7f:43:18:5f:8e:
1c:24:b1:79:16:55:b8:18:7f:be:61:bf:d1:08:21:fb:c5:80:
5f:fd:9c:fd:b3:5e:77:d9:33:b9:e3:b4:d2:e4:1d:e2:47:f8:
d2:68:3b:52:ad:f8:3c:69:d5:79:f5:d9:b2:fa:99:6c:27:25:
43:7e:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:48:40 2025 by rpki-client