Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: oKB5g8BdLOF3Zd9Is4rps0zLZ8PG9pfKsZMFX6QyalQ=
Subject key identifier: 6C:29:A3:95:EE:33:D4:E1:90:50:E4:D4:84:E0:46:2E:F4:74:D7:58
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 0197B6A077ACD92DE07B359DEDDF911628D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 09DA
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: n70z1wFHa4kL5fjWpL+plF4chFx0aPIp2wiBA6WLz1Q=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:77:ac:d9:2d:e0:7b:35:9d:ed:df:91:16:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=6c29a395ee33d4e19050e4d484e0462ef474d758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:06:9e:c0:92:60:2d:fd:d4:87:9c:db:52:
32:b7:62:2b:c6:86:1b:fa:ad:6c:cf:02:cb:5b:08:
e5:16:2e:05:e3:f0:9d:41:25:73:be:b0:86:3b:d3:
4c:7e:ec:05:93:38:86:c9:e9:79:80:54:43:b0:1b:
a5:6c:9b:6f:1a:ec:7c:09:d4:03:b5:1d:8a:27:a1:
7d:c3:b1:4b:1d:13:2e:d1:48:49:79:09:ab:e4:bb:
a2:7c:90:47:b4:f8:ec:70:0f:88:0d:0a:4c:16:f3:
18:63:ce:d8:20:94:9f:d4:7d:49:06:c3:6d:0b:cf:
4f:91:4c:44:64:0c:50:f8:46:3e:dd:74:c8:fb:41:
1e:ae:ee:9d:a8:c0:80:b1:6f:c1:72:db:85:2e:47:
05:3e:e9:5e:80:00:9b:a2:1e:10:dc:11:b9:a9:f7:
68:e0:57:f0:06:d2:fd:09:2e:e2:53:f7:e9:8d:98:
0e:d4:c6:03:75:06:e5:73:84:cf:fe:a1:c4:96:19:
9b:cc:f2:6e:f8:01:fa:9e:84:32:3a:98:18:b4:d4:
49:cd:ae:8a:47:4a:64:13:45:22:07:e7:c8:50:5e:
45:06:26:1a:37:6a:7d:98:ad:62:75:e9:f5:c1:c8:
ca:bd:a8:89:af:4e:1f:b4:70:ca:8c:b0:4a:27:47:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:29:A3:95:EE:33:D4:E1:90:50:E4:D4:84:E0:46:2E:F4:74:D7:58
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0c:36:9a:e7:b0:af:37:2a:20:78:ab:48:c6:e9:98:b1:45:
25:ff:1b:46:b2:fa:00:88:1e:7b:58:19:c2:02:25:b4:87:21:
00:d2:71:17:f5:d0:46:5e:06:ab:58:67:06:b2:6b:8c:64:38:
65:b3:d7:bd:c1:46:27:35:68:d4:6e:09:f6:4e:a3:85:44:e5:
0a:29:d4:05:51:cc:d4:20:eb:0f:a9:d8:45:ab:80:7d:23:70:
66:25:de:8b:06:fe:cf:d1:80:0e:9b:e8:b1:76:5e:89:76:cf:
b5:1b:1d:ac:55:6c:3c:47:fa:e2:de:14:02:cc:63:dc:86:81:
9f:91:a7:2a:05:e0:dd:74:e9:d9:99:3c:67:68:c7:28:e9:9c:
d1:81:4e:19:af:c6:d8:03:da:a4:9d:8a:14:1f:4b:f2:14:e4:
04:b0:79:8d:78:0b:47:cd:53:f7:7a:b1:2d:1d:72:6d:76:b2:
2e:23:5b:f0:46:20:da:0a:a9:57:29:f0:83:51:67:14:3e:e0:
f8:8d:31:15:dd:a3:6f:78:71:da:ad:70:42:e4:6a:4f:16:70:
df:5d:09:d8:79:2a:8c:ab:1e:15:01:4e:0c:dd:3d:c6:ab:4f:
2f:10:b4:71:82:74:e7:45:6c:0d:0e:d4:55:1d:6d:39:c1:47:
4b:4b:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:27 2025 by rpki-client