Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: ma4VeXhv8KcqM3QfVTSn3EVV7OVjhmrsU9LAdaDuax8=
Subject key identifier: E3:58:BF:57:F2:76:79:6B:94:64:82:61:8A:15:AC:74:8B:7C:BE:30
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 0197B7B34164E27BE10C6747C27CB9D4F14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: bk9krbg6BGP9MeksYL/AAVLozIIxG7WOWA1Kef2fR7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:41:64:e2:7b:e1:0c:67:47:c2:7c:b9:d4:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=e358bf57f276796b946482618a15ac748b7cbe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:e1:60:4a:da:f9:48:b9:1c:a4:07:6f:f3:
4e:26:b4:da:09:55:df:3f:68:91:19:8c:66:9b:c5:
d9:cd:34:a6:01:0f:ad:9d:df:66:f9:0b:02:fd:87:
33:32:40:89:a7:d6:8d:1c:de:26:23:da:93:65:21:
a7:c1:ce:8e:82:2b:32:23:95:0a:36:7f:da:82:3c:
93:91:a5:dc:6d:17:db:32:31:9d:08:7a:30:47:7b:
2f:30:b6:a7:6d:a7:71:94:bd:ee:8e:29:ef:1c:f1:
76:77:26:4c:d2:2c:4e:2c:68:1d:40:29:27:91:5c:
6b:f7:0d:90:aa:23:48:1b:e4:8a:16:c1:95:a5:f7:
eb:75:e8:90:48:0b:42:75:95:4f:ee:74:c1:89:9e:
70:99:55:7d:31:b3:51:5d:c5:08:e4:2b:ca:95:59:
07:bd:53:00:be:75:df:3a:06:d3:d4:79:65:52:fc:
3e:f0:39:e9:cb:03:0f:48:f1:7a:fe:c7:7f:86:16:
1e:9c:86:1d:8f:19:9e:71:ec:e8:8d:4a:4b:50:6c:
be:57:aa:3c:83:b4:e7:a2:0a:cb:f7:16:e8:01:13:
61:8d:28:1b:0e:b2:65:73:39:86:6b:a4:4d:95:3b:
64:a8:d5:04:e9:cb:74:e7:1e:88:58:d0:db:c1:1f:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:BF:57:F2:76:79:6B:94:64:82:61:8A:15:AC:74:8B:7C:BE:30
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:52:38:f5:41:0c:57:76:89:33:9d:ed:51:5f:44:37:4b:
c6:17:9d:b6:c5:ef:14:b8:4b:88:c0:39:29:7a:0a:79:2d:c7:
5c:a8:cd:fd:b8:f3:31:cb:79:ad:e2:02:9d:eb:6c:6f:9f:b7:
f7:32:09:8a:b9:fb:c5:c6:85:70:de:36:c3:47:40:49:ca:bc:
93:2c:20:8e:e2:20:51:d2:82:1a:c3:1e:bb:2c:42:48:a9:12:
48:8d:55:15:5a:3d:a6:d4:9f:61:73:5d:0a:b7:e0:db:b8:0c:
6e:9e:0e:8f:9b:8f:5e:60:44:5d:85:66:71:ea:4e:64:ec:cf:
9c:54:06:54:db:29:0d:9c:b6:f4:83:bd:35:2f:fc:5d:08:8a:
ce:64:5e:b6:c6:7f:f7:61:1a:97:58:4e:fc:16:e2:36:ea:eb:
5b:a4:20:03:1f:25:bd:40:09:3b:a2:e2:00:df:38:36:36:0e:
b9:48:63:73:50:06:e4:fe:43:e1:b7:40:5f:ff:59:77:60:a1:
5e:7a:14:f5:78:d6:e6:e0:df:c2:a3:c5:66:33:9f:f8:86:46:
6e:97:fe:0b:55:f5:ce:2d:ad:d8:da:f6:a8:10:a5:de:9d:42:
e4:e9:b9:17:d7:41:43:51:93:eb:d5:8f:3c:d7:e1:f8:f6:ac:
dc:9e:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:43 2025 by rpki-client