Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: OSqEBzYmf0d/uOcYy6TW4urpw2z9PPxCa9Hk8ZVIuPg=
Subject key identifier: 5D:1F:DE:89:76:FC:07:12:E0:C7:BE:44:92:8B:D6:FD:61:92:91:1A
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0197586D8EDE6EA9C6555F638E5653C5B225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 158E
Signing time: Tue 10 Jun 2025 06:01:04 +0000
Manifest this update: Tue 10 Jun 2025 06:01:04 +0000
Manifest next update: Wed 11 Jun 2025 06:01:04 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: ZvddPZN+57xmBwGZ7I7qThlvy02sO+qBnyfLBHGPeyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:8e:de:6e:a9:c6:55:5f:63:8e:56:53:c5:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Jun 10 06:01:04 2025 GMT
Not After : Jun 11 06:01:04 2025 GMT
Subject: CN=5d1fde8976fc0712e0c7be44928bd6fd6192911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:5f:98:8e:df:61:77:12:4f:34:02:1e:11:
d9:6d:98:a7:b9:f3:72:c4:6a:ee:e1:f9:79:a8:a0:
ad:ee:5e:e6:63:15:71:db:b5:41:af:07:d0:05:ac:
05:a3:a0:2d:11:ae:e6:51:0d:25:2b:85:a5:4c:be:
41:76:8e:6e:7e:d9:73:cc:54:74:43:2f:3b:15:4a:
10:06:4d:66:82:5c:5f:3e:21:7b:d4:4e:55:77:60:
89:99:c2:12:be:09:59:8c:b5:d4:6e:d9:df:fd:c4:
35:34:27:0c:56:c1:b1:1f:11:d5:1d:77:c0:5a:3e:
f1:17:ce:cd:35:0e:87:4d:39:59:95:1c:dd:93:5b:
3e:37:b8:eb:85:82:16:51:ec:7f:e8:d5:5d:4b:ee:
26:79:69:a5:7b:e5:a4:31:2d:75:96:44:c6:c5:d0:
59:00:71:85:b1:7e:62:20:2b:7a:43:48:94:5f:a0:
9b:d4:cb:34:3f:fe:4d:b4:1b:50:0f:e1:3b:a6:10:
fd:ca:03:85:e5:50:ce:b7:17:8c:dc:34:6a:da:d6:
19:ae:4a:f9:14:61:b3:ce:66:8d:1b:46:dd:9e:12:
b1:4d:59:bf:20:83:ff:e1:62:29:bf:b1:e7:bc:62:
7b:8b:f6:c8:8b:91:2a:cb:d5:9c:57:ae:83:3d:2d:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:DE:89:76:FC:07:12:E0:C7:BE:44:92:8B:D6:FD:61:92:91:1A
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:23:3d:df:51:63:23:d4:f4:97:1c:86:d3:44:33:07:72:ed:
37:d2:9f:cb:dc:bd:73:c2:b1:10:b6:93:76:3d:d7:23:98:1d:
c0:7f:0f:de:a5:a3:e6:ae:7c:52:d3:e9:07:ed:88:20:56:74:
1f:18:7b:77:18:28:5c:b9:39:6e:74:ed:36:4d:37:62:1f:7c:
80:a1:b1:34:28:81:72:b3:ab:e5:d0:e5:fc:e8:42:31:a2:06:
e6:41:3f:48:f9:5a:d1:e6:7c:79:99:c1:c8:5e:3e:ff:19:16:
13:8c:a2:37:33:6d:34:aa:8d:b1:7c:ad:a3:4f:49:23:33:e8:
69:f2:a4:a7:c6:25:2c:26:4c:5f:8c:eb:fb:95:d9:d0:d0:da:
3f:71:0c:50:30:41:df:f1:d8:60:1f:fd:00:25:eb:a7:f1:4f:
66:71:a3:5f:cf:71:cb:ac:34:96:ea:a8:93:bc:c7:22:31:c4:
53:fd:a3:dc:18:09:72:aa:6f:92:4b:6d:a7:d2:54:32:b0:c4:
cd:58:b6:3d:df:a6:c6:61:92:3f:0c:62:9b:e9:24:da:dc:c5:
ac:1c:02:20:71:b3:ff:f6:ac:58:3a:65:9a:51:08:55:a8:67:
94:e7:77:c8:cc:84:b5:b6:05:9e:60:02:42:7b:8a:52:da:d9:
7b:0a:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:38:34 2025 by rpki-client