Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: tB7Uqw9UBC387sNMkhswAnY3nfnxH9DrxfH8pZ0qUnc=
Subject key identifier: EC:C8:67:9B:3A:4B:F3:D9:1B:FD:CD:39:01:B5:10:00:C3:FB:B3:F1
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 0197470C1664F45B47DAB46896A5E7CDF71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1584
Signing time: Fri 06 Jun 2025 21:01:03 +0000
Manifest this update: Fri 06 Jun 2025 21:01:03 +0000
Manifest next update: Sat 07 Jun 2025 21:01:03 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: pR1SZoFYGrAnTleqAuBxbvH68Cm0rYmX34xbvZL8e2g=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:16:64:f4:5b:47:da:b4:68:96:a5:e7:cd:f7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Jun 6 21:01:03 2025 GMT
Not After : Jun 7 21:01:03 2025 GMT
Subject: CN=ecc8679b3a4bf3d91bfdcd3901b51000c3fbb3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:26:6c:aa:2d:bc:14:d1:33:09:cb:48:f3:
f8:c4:ee:09:99:e9:14:e5:5b:15:16:85:9b:63:30:
18:df:b2:c1:db:1c:29:26:89:28:f6:43:a9:08:09:
94:e4:b8:ca:64:59:35:47:f6:2e:89:eb:68:47:af:
c1:cf:2f:4e:e1:08:8f:a4:79:83:db:11:73:cf:6b:
77:2d:7e:e6:d8:17:fe:95:3b:23:e2:57:e8:0e:c2:
b3:d2:46:68:61:07:84:13:fc:85:59:1f:c4:4d:c0:
23:63:95:46:55:30:7a:7a:44:17:f1:c1:a4:8e:4e:
88:20:10:f1:dc:12:a2:15:3c:50:17:63:43:6f:4f:
62:17:41:ca:9b:58:bc:d1:87:ff:80:eb:96:ed:7f:
47:dc:d6:3e:e1:df:ba:67:78:6d:65:41:7e:1a:4a:
8b:b1:df:f1:42:c7:bd:cd:ff:93:5d:68:c0:8d:21:
dd:55:c9:f4:7d:07:f7:06:52:cb:a8:7d:54:fe:cb:
40:f8:42:a2:34:83:b3:82:bf:da:98:4d:62:b7:b9:
b9:29:9f:29:0d:19:4a:94:67:eb:4f:4c:02:4a:3b:
bc:22:3a:1c:a9:a9:29:f4:35:7c:e0:74:91:d7:94:
d8:0c:e5:a9:14:bc:03:96:d0:70:c3:71:03:af:2e:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:67:9B:3A:4B:F3:D9:1B:FD:CD:39:01:B5:10:00:C3:FB:B3:F1
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:a3:4b:33:f7:84:13:84:7c:5b:c4:41:cf:a7:59:cb:f1:
bb:84:f0:40:88:54:91:b2:e1:7c:e5:82:21:58:12:15:c2:7a:
8d:34:cf:99:70:58:70:09:80:26:1f:d0:37:62:4c:4a:82:62:
92:04:2a:a5:7d:f9:99:e8:22:36:20:f5:cd:79:22:7d:1e:62:
db:0d:34:26:13:86:e2:46:99:18:a2:e9:2d:c9:88:6e:7a:e9:
50:61:79:50:b3:45:7a:c9:41:2e:67:7a:73:6c:3b:83:a6:80:
7e:74:86:01:ad:e7:07:f7:fc:08:e3:9c:ef:90:b8:0a:2a:de:
32:d0:18:79:40:75:7a:e9:36:48:93:a3:01:a2:9b:5e:d1:64:
1f:95:0f:9f:10:11:28:1a:61:33:63:60:85:17:a7:41:f9:d5:
ce:5a:9e:4c:bf:8e:3f:a3:03:bd:f1:59:c4:f5:bd:95:2f:58:
2a:51:ff:6e:9f:6a:df:0b:a3:5d:cb:05:4d:eb:01:96:9f:9d:
cf:cc:b6:5f:5b:60:8e:78:9a:b0:3a:f6:78:28:35:ea:78:0d:
b4:63:1d:c0:47:1b:c6:98:b3:c9:91:c8:57:ff:72:21:59:40:
d2:f1:e0:e1:5f:ef:e4:a1:ea:79:8a:70:5a:c4:0f:9e:b4:db:
f2:33:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:15 2025 by rpki-client