Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: GpSVXDyNhVqJfhSnk1ac9zI83mTILgMwz99N/QF1Vmw=
Subject key identifier: 81:C1:D7:CF:44:28:45:40:EA:B3:54:A5:A7:6E:B6:84:51:80:A7:76
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 0197B745B831132029B4FA50ED7E841760BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0E8E
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: CpmS6KeW+lVdvVqw6LqqBqIttp1f71cc6WxZpB4C1ZU=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b8:31:13:20:29:b4:fa:50:ed:7e:84:17:60:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=81c1d7cf44284540eab354a5a76eb6845180a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:8b:d2:84:50:72:ad:1f:99:5b:eb:1f:6b:
8e:0f:f0:f5:ab:1a:e7:71:bb:18:1d:df:3a:c6:bd:
fd:85:35:ef:64:fd:8a:f8:a6:38:bd:5a:68:91:fc:
98:dc:ac:3e:ff:e0:02:11:45:aa:7e:a1:25:4d:f1:
1b:0e:b0:d6:c6:bd:5d:93:4b:e6:8c:b8:b0:6e:19:
8a:7e:c7:b7:ed:de:35:df:cd:d9:d3:0d:76:68:c7:
42:34:f4:3f:8a:c6:8a:77:f6:53:92:d7:60:3f:1f:
be:1f:26:a0:70:f2:eb:99:3f:d1:b3:2c:2b:0c:4d:
4f:bc:9d:ed:96:75:a4:a8:38:de:d8:b1:4d:e4:29:
a0:55:87:be:93:ba:7e:6a:6a:13:9a:79:cb:15:ab:
2a:58:1f:19:5e:ae:3d:1b:e4:f2:db:95:c0:5d:de:
7e:b1:da:46:3d:8b:61:06:6e:f9:40:fa:a9:c3:4d:
aa:ab:fc:83:c8:2d:48:e8:13:45:39:1c:88:df:29:
05:07:f9:57:b3:b2:e7:2e:05:a3:e2:79:86:6b:b1:
4c:56:80:df:9b:cd:4d:b2:34:a1:23:02:64:a2:a8:
69:25:d5:a0:2b:86:4f:22:fd:87:24:d2:e0:87:05:
1d:68:0d:2a:72:00:8c:57:af:49:55:ca:53:26:3b:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:D7:CF:44:28:45:40:EA:B3:54:A5:A7:6E:B6:84:51:80:A7:76
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7e:61:ba:5c:4c:15:a3:54:d4:87:60:61:51:92:31:ad:bf:
22:b3:4b:ee:cc:74:46:ce:2d:96:c4:3f:a4:1f:75:9f:67:9c:
39:a2:4f:7e:48:19:ac:2b:6e:d2:4d:9b:81:a3:c3:41:f8:88:
88:aa:d2:c7:5d:40:87:0c:d5:50:53:c4:57:82:90:31:aa:96:
6a:a8:e2:56:d2:bf:07:26:da:f3:39:0e:5a:52:9e:83:ac:06:
b7:3a:6a:dd:46:62:e4:aa:59:bf:0f:d3:b7:ff:bb:32:13:2c:
a7:12:37:ff:c8:e7:62:c7:8d:f0:3c:35:7a:ae:ac:0f:eb:b2:
7c:52:e1:1f:87:3f:33:13:96:29:aa:d1:a7:cc:03:d7:c7:77:
22:c0:27:b8:c8:99:c0:df:34:f1:ae:1d:53:79:d7:90:f4:88:
d7:a6:75:13:10:63:6a:a0:05:65:06:a5:31:13:13:81:57:c6:
cc:f9:0f:0e:c2:90:50:7a:e7:d9:74:47:0c:45:c0:10:7f:02:
21:e3:04:46:b0:f6:66:f0:95:68:c5:03:c1:c3:53:a3:3e:f6:
3e:eb:76:72:b2:6e:34:cc:ca:34:ed:34:1e:4b:f2:f9:a9:6a:
a1:2d:2d:62:69:a5:3d:56:c0:f6:94:33:e9:dd:93:cb:cb:66:
17:88:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:54 2025 by rpki-client