Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: PffIgBwduFRX24+uAtbt5NR49/aBUuaIeelxh3imEZk=
Subject key identifier: 3A:75:71:A5:7E:A1:D1:9F:EA:E1:00:E0:FD:9C:BA:CD:6D:FD:81:AF
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0197B6A23C5B460D8EE556AAF9F54E544C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:54 +0000
Manifest this update: Sat 28 Jun 2025 13:02:54 +0000
Manifest next update: Sun 29 Jun 2025 13:02:54 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: cy83q3A+y3tkQcIRpMtkJIVy3lNs8bjAion2FXB2Gp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3c:5b:46:0d:8e:e5:56:aa:f9:f5:4e:54:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jun 28 13:02:54 2025 GMT
Not After : Jun 29 13:02:54 2025 GMT
Subject: CN=3a7571a57ea1d19feae100e0fd9cbacd6dfd81af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:ba:53:51:7e:2f:2c:cc:96:58:3e:f8:54:
ab:0e:81:2f:c2:00:56:da:4f:f9:12:95:1c:47:63:
11:16:cc:2d:7a:37:0f:54:e2:d1:40:e0:c0:bc:27:
e1:2e:f4:4a:c6:74:91:a6:59:a4:c0:fb:87:80:58:
8c:06:f3:89:ee:d2:4f:48:97:4c:49:54:bd:59:74:
ee:20:09:90:0a:00:78:c7:f7:17:c0:d9:01:ef:fd:
1c:19:6a:99:54:69:c5:c5:af:b8:1b:d5:4f:22:74:
82:37:f4:a3:44:d6:06:0a:39:36:05:32:68:3c:cf:
cc:57:bd:8c:6b:92:08:0a:a5:b9:10:34:78:01:b1:
d5:48:70:c2:45:2d:33:20:b1:8c:38:46:e4:c8:d0:
3b:49:7e:de:83:8f:54:84:4c:8a:47:48:be:6a:87:
d6:1f:19:11:28:6f:3e:52:f7:d5:86:78:71:2c:06:
72:56:75:7c:12:94:23:63:fd:4f:68:e9:a0:14:2b:
48:f6:21:16:e4:66:80:09:e0:cf:10:b0:89:3b:6b:
46:8a:e8:21:5b:ce:ac:6a:77:0f:aa:67:46:7c:0c:
90:0e:95:ed:e8:7d:43:21:be:5d:6a:12:d0:2b:70:
f3:1b:7f:42:90:4f:a8:08:c6:f7:13:d6:75:62:23:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:71:A5:7E:A1:D1:9F:EA:E1:00:E0:FD:9C:BA:CD:6D:FD:81:AF
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7a:de:4f:4b:c6:67:8c:4c:35:74:fb:52:54:6f:71:fe:08:
0b:2f:61:35:8c:76:77:6d:7d:40:7d:5d:1c:17:40:36:95:a6:
29:86:a1:75:03:ee:5d:f0:83:fc:c3:b2:3f:2a:33:a0:7d:b7:
6d:e3:4a:9f:55:5f:d9:52:6d:48:4d:14:77:2c:c9:d3:62:9e:
72:5c:a0:04:89:b9:c6:8f:94:1e:b1:4b:53:0d:30:1a:c1:22:
a6:be:79:e0:cd:13:d3:44:78:21:94:9d:cc:9e:c3:3a:02:ca:
96:92:0d:21:10:da:a2:77:6a:f9:55:7a:cb:16:bf:2f:5c:80:
f1:0b:c2:76:e1:8c:5b:6a:5c:f3:31:4a:52:c8:d8:47:3b:21:
6b:a7:c6:72:11:7e:d1:a6:ce:cf:ab:01:36:58:ad:91:81:36:
c9:e7:92:4a:ea:06:b6:11:bc:38:c2:16:9b:9f:ae:81:11:87:
94:d0:0f:0b:16:bd:f4:2a:04:16:48:28:c0:54:5f:7f:af:59:
4e:ad:f8:b7:a4:2a:4c:0b:57:97:49:2c:93:16:81:34:d8:e4:
31:64:41:74:df:fe:a3:17:fc:54:51:20:4c:df:08:34:3a:05:
cb:59:7b:ad:bb:37:b5:2d:13:c3:df:d4:b7:bf:e1:23:ac:b9:
3d:66:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:24 2025 by rpki-client