Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: VBJcYQg0sSrPfFoDzA3huBoWVk20sHjyzQ11gs4sxhQ=
Subject key identifier: 23:B3:99:A9:D9:42:76:57:5E:50:87:FD:A0:64:DC:85:84:39:8B:D6
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 0197B8FD207BD1AB0F2961A9FAE76FD60E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 09F4
Signing time: Sun 29 Jun 2025 00:01:26 +0000
Manifest this update: Sun 29 Jun 2025 00:01:26 +0000
Manifest next update: Mon 30 Jun 2025 00:01:26 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: tYBpKG0RhBSBiqn7/kkjqXF4ci77MwFYc9afx9gn22I=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:20:7b:d1:ab:0f:29:61:a9:fa:e7:6f:d6:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Jun 29 00:01:26 2025 GMT
Not After : Jun 30 00:01:26 2025 GMT
Subject: CN=23b399a9d94276575e5087fda064dc8584398bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:82:5f:03:95:71:74:66:f4:ec:14:97:12:
19:af:95:43:60:a6:27:e7:5c:0d:75:6f:66:5b:eb:
0d:8a:9a:74:61:0e:37:ec:a9:46:fe:64:78:75:89:
ab:0a:1e:4d:48:78:13:f5:a5:90:f3:90:24:95:69:
9c:2a:16:d5:e8:14:de:55:01:d5:2e:53:0c:0a:83:
e0:f7:e0:fb:20:fd:87:79:e8:8e:39:6d:59:25:08:
12:f0:10:f7:d3:04:c1:4b:66:4c:93:01:66:4f:7a:
aa:cf:c3:ac:4d:58:18:6c:ad:f4:ea:79:4f:e8:48:
28:67:22:77:60:a8:c8:e9:11:b1:74:41:15:fb:d1:
e4:21:3c:fc:f5:95:e3:8d:a8:c2:ec:63:56:05:41:
0e:8c:96:f0:d9:65:4b:7d:3e:a5:1e:2f:c0:10:04:
41:92:bc:81:13:64:7b:2f:ee:4b:7b:57:db:fb:e8:
f0:a0:e0:b4:ec:32:54:45:ba:83:16:ea:d5:55:5b:
36:b6:4c:94:8c:14:85:be:e2:da:ef:24:2e:17:e5:
f1:f8:d0:d4:7f:89:d2:c0:d9:40:f5:e9:fa:03:46:
fb:ee:08:c0:bc:ab:21:e3:ff:a6:55:0f:11:8a:14:
fb:a8:97:7c:42:ea:b8:ae:c6:69:2e:8a:d4:e8:45:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:99:A9:D9:42:76:57:5E:50:87:FD:A0:64:DC:85:84:39:8B:D6
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:11:f6:52:2d:35:ac:5e:a2:1c:52:eb:20:7d:5e:3c:05:
06:fd:27:03:74:0c:b9:5c:c6:10:13:7e:12:3b:44:b9:68:1e:
1c:25:68:dd:3a:89:2b:f6:ee:b4:3d:04:d1:57:22:9d:9b:56:
31:ac:a9:85:ed:bb:50:2b:76:12:95:71:0d:d8:07:c3:49:ff:
2c:2e:cd:bb:8e:6a:3c:10:8e:33:ce:bb:4d:60:fd:1f:d6:3a:
67:06:59:1a:44:a4:65:64:b5:33:37:91:57:9c:bf:ea:36:0c:
7a:1b:5f:a2:70:5a:9f:9e:d0:47:e7:8a:c6:57:65:e8:d3:d0:
f7:bd:b0:75:87:ff:c7:6d:e2:b8:81:5c:2b:a0:6c:5f:6c:16:
cd:12:6d:58:8f:89:44:dc:32:f5:63:54:17:40:98:f5:48:e8:
20:6b:75:6c:06:ad:1a:a0:6a:0c:53:8d:37:43:dc:c4:40:8f:
2c:59:43:f4:54:01:0e:b7:68:68:16:bc:a1:dd:da:47:25:05:
fd:44:df:20:16:05:83:d9:fe:fd:53:e1:d0:17:2f:d8:cc:89:
42:b1:95:dc:7c:6c:69:8c:92:b5:44:cc:6d:40:8c:c0:7c:0f:
88:96:d4:53:ef:2b:d5:07:d4:5b:7c:56:ae:0b:92:db:de:c3:
da:61:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:55 2025 by rpki-client