Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: FLRBbYiQ96lMETFKaUMgPKJHu7CXw5vi7pW/TO0GGpQ=
Subject key identifier: 54:D4:2C:D4:16:85:12:79:9E:0A:70:8D:68:13:EC:80:A4:EB:5F:9D
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 0197B70F2E12716AEF840A0CDB80A53ACCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 05D1
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: n6ZmD5uLc45G3VnkNZIWOzB67FKQLjSCoaH5Kg9fXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2e:12:71:6a:ef:84:0a:0c:db:80:a5:3a:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=54d42cd4168512799e0a708d6813ec80a4eb5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:f9:35:ee:f7:f5:f3:de:e4:e0:68:2d:b9:
72:0f:62:83:b3:02:91:16:37:80:31:3d:7a:64:db:
e6:e0:10:55:ea:0d:2e:f2:15:b3:9a:f6:56:ec:5f:
3e:4f:90:49:1f:1f:7c:36:33:20:3f:3a:8a:87:ad:
19:ea:a5:a7:61:c1:16:d1:b8:b1:b5:ca:0a:39:dc:
67:b3:ec:6b:37:8a:62:36:a9:24:d0:8f:64:aa:e8:
75:d1:38:1a:8e:55:cb:4b:bf:d9:cd:f8:df:ca:39:
6b:5f:22:17:93:99:75:53:69:bb:13:ee:16:5a:e4:
1c:9a:ba:13:46:68:bd:76:a0:5d:79:7f:36:2f:aa:
98:a7:06:da:60:3d:85:d4:ad:31:7a:92:9e:d9:5b:
9d:6c:20:fd:65:02:38:bf:48:9d:ad:de:48:47:da:
31:bb:d1:78:2a:ef:97:c0:30:c5:79:23:17:65:65:
57:9b:eb:60:25:6e:47:0d:5e:04:10:f0:16:d6:3b:
cc:be:dc:33:50:44:3f:79:e0:bb:6c:51:2b:cc:2f:
42:fd:b2:bd:05:45:71:82:46:a2:56:6a:a3:ed:48:
00:9a:27:7f:69:eb:86:d1:ee:f5:87:ac:ad:4c:72:
0c:a2:38:d2:28:49:c7:44:97:98:34:c0:f5:33:8c:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:2C:D4:16:85:12:79:9E:0A:70:8D:68:13:EC:80:A4:EB:5F:9D
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:42:dd:0b:81:96:d5:3d:76:ad:ab:e4:5c:cf:35:c9:9d:
b2:97:e7:26:94:36:30:c6:9e:e2:40:6e:23:74:7a:c1:c3:9a:
55:34:cf:52:4c:ba:d9:ac:5e:e1:fa:71:49:04:07:54:5e:4c:
f6:e9:06:67:90:ed:7c:d1:ce:b5:f2:f1:21:4c:ea:ac:c9:6c:
16:32:f0:17:1f:f5:c5:96:13:b4:be:8c:39:82:f3:16:aa:c2:
e5:1d:b7:a5:20:3c:29:16:b2:0d:f6:7e:fb:28:75:14:f4:6e:
f5:2c:8a:b9:27:cf:53:7a:eb:17:6e:59:44:04:c1:65:ce:3a:
5b:7d:ed:b5:bc:2c:cd:69:53:b1:0e:cd:3a:84:1a:27:bc:ab:
72:cb:8c:92:a1:41:56:af:f2:9e:85:5f:9b:df:69:c3:77:d7:
23:ce:d2:33:ca:45:e8:ad:8d:3f:e5:8c:2d:47:bd:bc:ec:ad:
55:a9:b9:a8:df:ec:56:f8:5f:bb:3e:11:7a:ad:cd:96:98:51:
d5:ec:d8:65:20:87:1b:28:53:1f:7f:e5:b7:4b:09:c1:b8:82:
95:04:2f:04:06:e2:83:18:b9:2b:ea:4a:30:20:e1:f5:e5:14:
52:7a:a3:72:46:3f:a5:5c:4f:27:d2:d2:f1:e6:bc:cc:0c:d7:
1b:2c:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:29 2025 by rpki-client