Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: SZ/NK5ZrVCMAWKM9BAva289XhmvbBcz+fyPwbvgIhUc=
Subject key identifier: 18:FA:81:C2:02:82:93:4D:99:A5:F4:16:8B:24:C6:42:03:49:08:5D
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 0197BAB4579564EA23BDBCF7BE9B77CD0C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 08:01:10 +0000
Manifest this update: Sun 29 Jun 2025 08:01:10 +0000
Manifest next update: Mon 30 Jun 2025 08:01:10 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: IboS50cTcF6QVEysztGYNzKT58DUrz31inozS+s5zQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:57:95:64:ea:23:bd:bc:f7:be:9b:77:cd:0c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jun 29 08:01:10 2025 GMT
Not After : Jun 30 08:01:10 2025 GMT
Subject: CN=18fa81c20282934d99a5f4168b24c6420349085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:a2:cb:8e:80:c8:01:b7:3b:64:7d:04:20:
2d:ff:27:79:8b:ec:5a:92:96:ec:e1:94:21:0d:c9:
12:2d:f1:39:18:0a:9a:f0:e9:9f:50:13:4e:29:0e:
75:06:36:0f:d9:0e:3b:db:c3:2a:b1:d0:8a:76:25:
ac:e1:ea:11:93:13:16:f2:93:24:6f:67:cb:7d:a0:
3d:f4:a1:df:5c:bf:58:f8:78:36:09:45:ed:21:9b:
e3:67:e6:97:93:08:fa:6a:3e:29:6f:00:3a:0f:36:
f3:7b:e2:7f:4b:ac:a6:6a:84:5b:0b:d7:25:40:d6:
47:27:85:17:aa:6c:10:00:c6:8f:32:e1:ae:a7:4e:
db:81:b8:83:56:92:23:b0:3f:2b:82:a3:3e:9a:2c:
67:2f:ab:39:c7:ff:e0:66:a8:6a:58:07:88:e9:b9:
2e:aa:51:80:d5:9b:a4:1f:c1:ff:dc:13:73:6c:ee:
50:10:ab:45:90:46:1c:7d:fd:a0:0f:8c:c7:26:f3:
65:d7:b3:bb:b4:db:0f:52:6a:a1:57:49:d6:47:b5:
81:13:fd:35:f4:8b:1f:5a:f8:71:ff:36:88:c8:9a:
45:0f:e0:07:38:e8:a1:ba:32:79:e9:f0:03:90:b6:
a1:6f:61:b9:4b:b2:bd:6a:2a:57:fa:f6:e4:59:a8:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:81:C2:02:82:93:4D:99:A5:F4:16:8B:24:C6:42:03:49:08:5D
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a1:74:08:69:58:16:b3:39:3c:ec:a8:23:63:19:bd:06:9f:
fd:ae:09:8f:a5:14:c0:5c:b9:e5:e7:7c:05:50:17:7d:0f:13:
84:37:fa:ee:f1:4e:de:2a:03:93:b1:53:41:f0:53:13:b8:fd:
a4:5c:e4:86:f6:07:e9:dc:48:fd:89:4b:2e:70:e5:81:01:ea:
3f:05:a8:ee:31:9b:2f:67:7c:a7:67:c8:6c:95:38:ae:32:c9:
a9:d6:12:e8:78:2f:42:e5:e0:4d:c8:be:47:0e:c9:51:8b:03:
c2:4b:a7:39:43:df:78:20:3a:ab:a8:27:a7:6d:e7:5e:e4:e7:
3b:4c:6f:57:af:8b:49:3a:2c:c4:b9:2f:43:36:9b:f7:05:31:
e3:5a:98:a5:3c:c2:f2:a7:85:a7:c6:a3:c8:f1:77:68:84:50:
c2:ef:02:b4:14:01:69:61:27:0b:0e:3d:56:e3:08:41:94:97:
02:cd:11:41:62:fc:7e:a2:ef:08:e1:48:be:fe:95:4e:c7:db:
2b:36:55:ee:9f:32:13:00:f5:6c:b0:bd:5f:0b:59:ab:f4:3f:
1b:e7:aa:75:8d:6b:10:00:ba:c3:d0:4d:0f:f8:d9:72:e0:cb:
10:a8:2e:b7:b0:2a:0d:cf:e8:af:ec:a9:0e:32:f8:32:50:c9:
89:34:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:44 2025 by rpki-client