Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: vjf2vGSAOwuXbyWTE64MWfb9TUTEYhVj2tpdLDrGkpY=
Subject key identifier: CE:DA:A1:6B:E5:19:08:2C:C3:D4:E1:E7:D4:4E:27:6C:D5:96:CF:18
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019745C251AA27F10829D139FE3DA30799B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 15:00:52 +0000
Manifest this update: Fri 06 Jun 2025 15:00:52 +0000
Manifest next update: Sat 07 Jun 2025 15:00:52 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: Fp91TGWW1eHfRttrSL9/vk7fyzoUaoDaGTeHiranSd0=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:51:aa:27:f1:08:29:d1:39:fe:3d:a3:07:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jun 6 15:00:52 2025 GMT
Not After : Jun 7 15:00:52 2025 GMT
Subject: CN=cedaa16be519082cc3d4e1e7d44e276cd596cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:03:4e:75:9e:d4:b0:82:1b:5c:ae:e3:bf:
24:f5:c9:72:3b:bc:ff:90:b8:86:85:1a:d1:98:03:
68:87:54:65:4b:24:86:ec:19:3b:34:19:17:a4:8f:
eb:53:62:a6:eb:b5:25:b6:56:fd:91:7e:30:e4:36:
39:2d:b5:79:01:7c:f8:c7:9b:b2:0f:c0:fc:fe:b0:
ab:be:b8:e8:1e:e1:6e:2b:4f:f0:81:b4:e0:96:9f:
78:6e:a6:bc:8a:89:1c:aa:6d:6d:f9:e7:dd:7d:05:
c8:34:84:ae:da:20:fc:e6:42:28:f5:28:cc:c9:8b:
3e:c3:8a:32:53:8c:45:d9:6f:31:83:54:07:4d:39:
18:6f:39:24:b7:02:04:ae:ea:19:b4:c3:f2:36:4c:
51:ad:f0:f7:23:33:3e:46:e4:8d:6e:54:35:a5:aa:
b9:4d:12:da:49:9d:55:8a:f6:72:00:26:bc:c9:1a:
93:d3:34:ec:16:d5:3f:d8:96:57:a6:06:42:2f:11:
77:e3:97:e5:dd:43:2f:43:7d:25:a3:b0:97:34:c3:
1c:43:42:5e:68:d4:cc:a6:81:8b:42:bb:24:26:4d:
d4:7b:d3:89:2e:85:11:3a:54:cd:51:17:88:90:09:
9b:56:94:12:e5:5d:b5:4c:0c:91:ba:a9:0c:bf:69:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:A1:6B:E5:19:08:2C:C3:D4:E1:E7:D4:4E:27:6C:D5:96:CF:18
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a4:0e:7b:2f:36:9d:4c:e2:f7:29:8f:41:2b:06:ec:66:08:
c7:6b:c0:4b:ce:46:d2:6f:4d:b0:ca:47:20:39:fb:ba:e8:62:
29:2f:12:70:08:2c:b6:c6:4b:54:1b:03:7e:78:0d:3d:d2:71:
22:5e:c2:a9:95:38:f4:9d:9e:75:85:51:1d:b3:a9:c8:e7:88:
be:79:08:60:51:65:3f:15:86:3e:e2:a6:b3:16:99:e3:ed:5c:
c2:78:7d:37:e6:32:81:54:7f:28:9f:8a:52:fc:b3:99:57:13:
90:70:49:77:07:7f:0b:52:92:8d:92:4b:dd:56:11:f0:4a:bb:
cc:d2:18:21:4f:26:22:11:3b:85:b9:70:30:cc:cd:b5:70:ec:
b8:3e:2f:14:13:50:1c:57:9a:65:97:dc:24:b4:0c:a7:53:a5:
92:32:f4:21:db:42:bb:0d:8f:97:ea:48:13:69:d7:08:b3:d2:
4c:50:40:74:28:80:9c:ad:2b:aa:47:28:9c:6c:fa:dc:ba:8c:
32:ee:04:37:d1:ca:ea:b1:b8:47:94:59:77:ac:84:d1:f3:b9:
6a:80:bc:9e:c1:c7:89:b5:cf:df:f6:d7:24:fb:20:94:90:75:
a1:92:3b:53:31:ca:b7:e7:9d:11:72:c4:12:8c:5a:e7:fe:21:
2a:09:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:33 2025 by rpki-client