Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: dkPUDrubgFQTOOmqLRA6juLOW1tWQ5XHaJDBV7KFTvk=
Subject key identifier: 91:44:CA:3C:98:A2:E6:C2:7B:15:F0:6F:28:CA:2C:06:4B:6E:A4:CD
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0197B6D756BB724A5AF0DE53A9839EEF0FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=)
2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 5p7pvyYZdpJVXgrWAZqqqSiAk9l2QPT9Q7Cz3x7a04A=)
3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:56:bb:72:4a:5a:f0:de:53:a9:83:9e:ef:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=9144ca3c98a2e6c27b15f06f28ca2c064b6ea4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:c5:e2:4a:78:0d:96:9b:38:79:d3:a1:93:
76:8f:8d:f0:62:8e:a7:f1:45:93:ba:c4:bc:9a:0c:
63:98:55:09:c2:32:9b:79:9a:47:7c:db:6f:9a:fe:
98:c3:03:65:eb:54:01:02:f3:eb:67:54:ff:a2:e3:
94:36:a6:fb:aa:39:49:51:e1:6e:ee:95:03:05:84:
6a:54:3d:5d:8c:37:c6:3a:88:8d:f5:36:8d:98:e1:
49:2a:1d:34:f0:bd:ff:af:83:cb:14:d3:04:e4:82:
57:1b:dc:ee:81:71:8a:17:a2:7d:84:45:f9:3a:53:
8b:1e:2c:58:c9:ca:1d:4b:73:7c:57:d5:e5:ef:1f:
5a:d6:29:65:3a:45:c1:c2:a8:dd:05:cf:f1:bc:32:
e8:d1:47:cd:5e:9a:4a:1e:f1:53:62:4c:d5:07:7e:
16:8f:48:d2:4d:c5:3f:2f:48:22:15:7b:fa:04:b1:
ca:ea:92:cd:44:77:d9:0b:50:c2:75:c5:4a:7b:f6:
69:15:7a:65:3c:6c:aa:ca:f1:75:9b:63:21:62:42:
9d:48:10:86:77:4f:5e:ad:de:36:c4:31:ac:03:33:
09:09:fc:8f:db:19:7b:fa:88:a8:f8:42:6f:db:65:
b1:14:d9:44:08:41:9c:fc:64:34:9c:a6:4f:83:d7:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:CA:3C:98:A2:E6:C2:7B:15:F0:6F:28:CA:2C:06:4B:6E:A4:CD
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:e3:55:45:a1:71:71:b1:f0:89:ae:67:38:ae:83:05:76:
b4:e3:ae:ee:77:f6:bc:63:01:f0:50:cb:5d:d7:d7:6a:d1:fc:
34:6e:e0:96:f6:0c:08:4e:c7:7d:93:51:02:08:aa:c1:e2:ca:
ed:49:5d:10:6d:50:a0:cc:3b:58:2c:e6:77:f7:b1:74:95:55:
e2:89:e3:de:76:cf:4a:de:a8:e3:4b:61:ce:c6:89:86:8e:5c:
0c:62:ad:d9:ea:e1:86:ee:a5:d9:47:0f:14:d0:ed:d3:25:52:
78:4c:5e:72:0c:d0:0c:f8:15:c1:b4:51:ce:53:68:5f:49:46:
cf:21:cd:25:84:fe:95:26:89:80:fc:06:38:a4:78:c4:e4:bb:
10:03:f7:78:8a:02:de:4e:2b:58:70:fe:a2:63:e0:47:3d:9b:
49:a1:6c:26:fc:d3:1d:b0:61:36:1b:98:13:7f:fb:4a:da:e2:
84:f9:29:81:5f:cd:24:06:93:0f:b6:06:23:84:33:d3:2a:21:
25:aa:1f:2b:0e:a0:4b:cc:dd:00:94:85:af:91:f5:01:78:73:
8a:a8:2a:a7:ae:16:ae:26:29:c1:b6:ea:59:43:79:96:b2:23:
09:bd:1d:2b:1a:60:88:dc:97:30:a3:af:fd:1e:ed:32:89:fc:
a1:24:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:09 2025 by rpki-client