Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: 35MxMHV0idluc6A/64sm7ucD6Ro39iZdUZs/9+39vh8=
Subject key identifier: CC:42:D7:4F:DC:EA:CD:01:45:57:2E:31:48:0F:D9:42:12:4B:BA:F6
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 0197B77C57293CB8A8FCEEF3CA8A03ACEF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: Bt6r1pkrxqmcpQ6N6oLptGErPiJyvme22NYbpy0rKzI=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:57:29:3c:b8:a8:fc:ee:f3:ca:8a:03:ac:ef:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=cc42d74fdceacd0145572e31480fd942124bbaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:48:74:cd:e4:84:81:e5:ad:63:55:76:1e:
46:99:31:39:fe:80:2f:2d:76:59:7a:48:ae:48:0f:
ac:36:51:ca:ad:75:06:95:e7:ff:37:1d:06:30:42:
e2:3e:7d:e5:3b:7e:4c:df:66:09:05:64:d4:65:1f:
96:75:75:04:a6:ac:bb:e7:01:8b:53:ed:90:00:ce:
e2:81:7b:21:8b:3f:d5:ac:66:99:15:ed:1a:9e:d1:
73:8b:de:98:2e:28:2d:4d:33:49:0a:bc:d9:0b:ac:
d7:b1:02:0e:ac:9e:55:75:c5:12:5c:f6:f6:ee:7c:
ad:d9:48:69:8b:8f:bf:c6:5f:09:f7:27:0d:07:5c:
ce:0e:d2:82:a9:55:5e:9f:eb:01:6b:2b:86:7b:7e:
a7:41:4f:97:78:06:27:f6:54:8d:40:2a:38:74:7b:
52:4d:84:6f:d1:4b:0a:cd:89:e1:e3:e1:56:9b:1d:
d6:32:38:ba:4e:64:e1:3b:ee:63:f5:1e:94:c4:96:
67:38:9a:e5:e0:3a:7c:ae:5a:31:1e:93:4d:e7:2e:
94:64:54:66:c5:61:05:8a:3a:d1:df:ac:95:c0:4f:
6c:3b:e5:d3:45:78:82:2f:4c:32:92:8c:47:38:92:
c9:4a:24:fb:58:2d:35:b6:40:fb:0d:26:d9:aa:88:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:D7:4F:DC:EA:CD:01:45:57:2E:31:48:0F:D9:42:12:4B:BA:F6
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bd:9f:f5:7a:43:0e:fe:48:e8:f6:b0:53:8c:a6:2c:09:07:
d5:ca:4a:f9:ee:be:27:cb:1c:dc:a9:bf:6a:6e:7f:d0:f9:48:
bd:bf:f6:d1:d7:cc:f2:39:8d:59:73:71:ae:0a:ac:96:70:23:
d4:38:6e:91:4c:4d:b4:b0:a1:52:ab:0e:8f:34:a8:70:dd:8e:
da:b4:db:e1:70:d4:6b:64:56:af:f6:27:d7:73:84:0b:4e:a2:
42:24:c8:8b:59:5a:54:7d:da:09:6b:6a:17:c0:77:a3:eb:71:
5d:9c:e5:6c:75:a8:91:41:00:51:e9:ca:c5:8a:7b:ee:02:5d:
0a:24:0f:5c:6d:cb:bb:ee:2b:bb:9c:f0:8f:15:06:99:26:3c:
07:14:73:d9:28:11:eb:5a:ee:fe:2f:12:23:40:3c:62:16:c7:
08:14:7f:97:e2:83:36:7a:ca:ee:b1:5c:21:1a:2c:93:95:0e:
f7:60:b3:91:88:9c:e5:e3:42:bd:20:13:1d:bd:ab:1f:e7:4a:
92:e4:81:b0:14:5f:05:8f:db:b3:ce:26:fc:07:5f:ce:80:43:
1c:d2:66:c0:bf:e8:85:13:05:f5:e9:46:dc:44:d2:c1:71:d3:
73:02:24:70:01:8a:4b:08:be:8b:79:a0:e9:58:3a:3a:96:77:
94:a5:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:22 2025 by rpki-client