Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: 4DNdV+UyhZyP/eFPZ3SZn5NUBmh37PQDANm1r3ZpIUA=
Subject key identifier: CB:82:A4:B4:C5:F7:57:74:3D:B7:F6:DA:35:C1:70:48:C1:4F:A7:5E
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019769299B2A082B466830E1378415DE9891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 05CC
Signing time: Fri 13 Jun 2025 12:00:23 +0000
Manifest this update: Fri 13 Jun 2025 12:00:23 +0000
Manifest next update: Sat 14 Jun 2025 12:00:23 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: rICPOpoCzsaySq5e5ZWzlYQF0wEowZ7wosTmZfo2c3U=)
3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9b:2a:08:2b:46:68:30:e1:37:84:15:de:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jun 13 12:00:23 2025 GMT
Not After : Jun 14 12:00:23 2025 GMT
Subject: CN=cb82a4b4c5f757743db7f6da35c17048c14fa75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:a3:76:42:13:68:78:70:0d:6e:bb:59:a6:
2f:af:bf:60:d0:a1:77:90:ee:ac:e1:ac:c0:c0:64:
3a:58:3e:2e:25:82:43:ea:19:05:09:92:41:c7:c4:
17:1f:57:b6:a1:0a:78:9f:26:08:d0:d4:6d:0c:01:
2f:55:9d:e4:27:f9:65:37:81:17:f7:46:31:6c:67:
a6:14:d6:57:9d:db:4f:fd:d8:0e:39:ed:62:04:37:
b9:0e:fe:87:2a:58:c0:74:d9:71:21:96:38:70:c7:
0d:66:1f:44:3b:0c:b1:84:b1:1c:f2:19:43:a3:77:
ec:a0:02:6a:83:39:13:7e:35:8b:74:be:a6:71:80:
e5:bb:88:6f:53:41:2e:c7:27:17:4f:d5:9e:32:68:
17:ad:5f:8e:f4:32:cd:a9:c0:b6:b6:e9:94:31:91:
84:8f:ed:c5:08:ba:2a:ed:75:4a:99:2f:f0:1f:fd:
3c:01:b8:0a:49:af:8a:88:dd:4f:71:2d:4f:84:fb:
7d:f3:7b:4f:24:c0:f6:16:89:e4:a4:e7:78:40:a7:
3f:08:bd:56:53:e3:f1:ea:54:18:92:bd:22:0c:3c:
ff:b7:0d:da:41:b2:47:d9:33:25:14:d5:58:38:d2:
16:da:66:03:9c:2a:20:b6:87:e2:9b:2a:a5:76:43:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:A4:B4:C5:F7:57:74:3D:B7:F6:DA:35:C1:70:48:C1:4F:A7:5E
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:b1:cd:7b:2a:38:37:c7:e9:8e:18:57:a7:a4:8b:0e:6b:
93:08:71:ea:c5:ca:59:9b:c2:26:f6:7f:b5:77:db:d6:c1:b7:
10:df:a8:63:7b:d7:72:c5:e3:12:a7:28:eb:b2:0b:62:48:a4:
94:05:a9:20:be:9f:cf:36:0c:e0:1d:aa:f6:4e:75:c6:db:61:
f9:c4:e6:66:4f:11:83:e8:97:90:65:2c:6c:92:1a:5f:bd:5e:
de:2c:ec:0d:30:4c:14:a5:55:a6:4e:e6:e3:9c:c1:92:55:b4:
f0:18:c7:cc:10:10:53:b9:2c:94:e0:ba:72:05:40:f2:44:ef:
55:d4:68:2a:56:fa:b5:e4:46:d7:4b:03:2c:9d:a3:83:df:51:
75:c9:10:c5:7a:46:ca:41:7a:bb:c0:d4:c7:a8:96:30:3d:f5:
a3:84:08:ab:98:59:ad:e4:ee:50:dd:5b:68:d8:9f:23:ee:e1:
d4:a2:cb:62:d2:66:f2:ee:8b:a8:b7:68:7a:37:66:b9:3e:cd:
51:03:3e:e9:5e:dd:e6:1b:e8:19:9d:24:60:19:36:92:a6:04:
14:56:c0:ba:0e:ff:10:0a:47:86:25:07:d0:6e:db:45:dc:6f:
b8:68:2b:1f:74:f5:3f:e8:c3:02:d5:6c:3c:b0:aa:dc:3d:8c:
e2:4a:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:05:01 2025 by rpki-client