Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: k+7jU8uJJxDHZ9c2kgjWKAjekzqcI9giMqgBcQWspVc=
Subject key identifier: CB:83:E1:A8:7F:B9:F9:14:4A:E2:62:45:7F:5B:66:55:9D:B7:6D:D8
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 0197B7EA7A59B3A76F1D1CED2E16B5D95C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: cGAu/srUdWPNApA1uV/fT5VQisRYNiD5G+OAeTTKGBo=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7a:59:b3:a7:6f:1d:1c:ed:2e:16:b5:d9:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=cb83e1a87fb9f9144ae262457f5b66559db76dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:63:63:05:c9:58:d4:bb:5d:00:bf:3b:f1:
1f:5c:e1:39:45:af:45:30:0a:2e:64:bc:8e:e4:a0:
01:3f:1c:2c:cb:23:3b:57:3b:16:ad:e2:45:ea:1e:
ea:a5:25:30:e3:82:59:da:21:10:d6:5f:1a:76:ce:
20:ec:f8:17:b8:5a:7e:29:91:44:fb:91:92:dc:bc:
dd:79:dc:30:4d:a2:9d:92:05:51:31:2f:50:64:eb:
cf:6b:30:16:75:d2:22:d5:a6:73:95:0a:e0:04:6b:
65:41:ab:6b:47:f3:f0:3c:26:1e:fb:66:b0:dc:92:
54:40:ec:50:19:50:9f:d4:62:d7:9c:dd:2b:4f:05:
fc:d5:2d:52:85:47:f5:7f:9a:b2:43:a1:e8:22:4b:
04:e8:b5:78:8a:af:86:e1:2b:ca:b9:5c:0e:f4:15:
7a:9d:12:a1:dc:57:bd:ff:46:c1:75:20:b3:47:e2:
20:66:0f:13:c0:c9:aa:91:ba:bb:00:d2:d3:e0:c7:
e3:71:44:57:82:67:b9:99:e6:34:4d:b8:6d:75:36:
5b:4a:39:ff:dc:60:c5:eb:8a:ef:13:d0:b5:a3:fe:
a6:3d:11:d6:2d:a5:22:b3:50:fe:dd:bb:f6:f2:d7:
a3:1a:99:6d:6f:d6:8e:c4:ef:fa:c7:12:72:c3:19:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:E1:A8:7F:B9:F9:14:4A:E2:62:45:7F:5B:66:55:9D:B7:6D:D8
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ab:6f:c9:9c:cc:6e:05:ec:0c:d6:d1:5c:90:0e:5f:5a:01:
ed:d7:00:5f:a5:4a:1e:dd:70:97:5b:b6:51:37:80:59:1f:66:
8a:36:5e:29:b5:24:71:79:9d:5d:d9:10:29:a8:b7:97:61:e1:
63:ed:aa:37:80:c6:e4:3b:48:d1:eb:cc:88:90:4e:f5:83:2e:
bc:ce:f2:b3:d6:88:e5:d1:7e:19:22:fa:84:aa:55:52:31:25:
68:ac:0b:12:d1:b7:90:6d:db:1c:a2:34:7b:9e:57:f1:d6:c4:
4f:49:a6:d1:89:d4:01:11:24:ac:6d:07:a1:fc:84:1e:0a:03:
4d:b9:ae:0c:cf:60:27:91:e0:b5:18:a1:2f:25:af:0d:e9:d8:
81:c9:4b:82:01:0b:30:18:c0:1f:c8:9e:05:0f:b9:94:72:e2:
c2:3f:4e:7a:61:9c:9e:62:4b:1c:b2:43:54:57:a6:e5:a2:b9:
a8:3c:81:0a:f1:e6:68:1a:60:21:87:00:27:26:1f:46:da:af:
4f:98:d0:e8:62:9a:1e:c9:93:9a:41:2a:fd:43:fb:c1:4d:3a:
90:42:7d:61:09:fc:b2:a0:ae:1e:52:46:71:05:e8:21:42:b5:
07:07:36:7e:86:9d:60:32:87:cf:9b:d8:ce:90:5e:42:57:e3:
9e:25:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client