Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: Z++0jVzn8LfCKZ76aLjEGkWq7VsXJ+4WyPCbnl+yft4=
Subject key identifier: D6:28:A1:7D:A1:16:0C:BC:55:53:D6:C5:05:9D:88:B7:FB:58:E4:FF
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0197B88EA71E513607FC45452B5D92612921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:00:45 +0000
Manifest this update: Sat 28 Jun 2025 22:00:45 +0000
Manifest next update: Sun 29 Jun 2025 22:00:45 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 7mEtvtPU79E7Fjwto/dtVpuQHJVMjfUcFMRa+OKZg+0=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:a7:1e:51:36:07:fc:45:45:2b:5d:92:61:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 28 22:00:45 2025 GMT
Not After : Jun 29 22:00:45 2025 GMT
Subject: CN=d628a17da1160cbc5553d6c5059d88b7fb58e4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:7b:4f:5c:b5:71:76:6b:fc:ab:b5:4f:9b:
d0:f9:f1:aa:cf:d6:8f:88:17:9b:dd:db:00:d2:2d:
d6:a3:75:3a:4b:3f:51:6f:0e:ea:36:1e:56:95:8d:
eb:79:16:1c:24:0a:d4:11:8e:6f:85:a8:81:0e:73:
a8:bb:1d:84:88:4b:97:34:c9:7c:d5:d4:b9:0f:9a:
0f:d1:fd:42:cf:c2:75:f2:c4:9b:57:e5:33:7d:e6:
76:dd:53:37:ec:9b:b2:82:0e:fb:b6:53:5c:2b:45:
c3:6a:ae:c0:bc:3a:a6:fe:c3:e4:a6:c2:e5:53:41:
1b:cb:13:73:d9:ec:77:3a:45:f1:a8:cc:27:90:7e:
85:4a:3e:5b:5b:f4:83:f6:89:61:81:9d:3c:d7:1f:
c2:a3:37:3b:1d:7e:f9:dc:12:e4:a1:d2:5b:7f:be:
41:51:1f:6f:27:8f:ce:3e:ae:be:3e:48:90:37:2e:
de:98:55:40:10:a9:a2:96:7c:33:00:da:06:3d:1f:
6e:6e:16:e4:0e:c5:b4:28:4b:19:4a:9b:0e:9d:b1:
48:f8:62:2c:58:05:d9:b6:f5:87:1d:e9:e7:31:df:
a7:5c:bb:42:dd:e2:64:36:8e:d8:f2:ce:06:d0:2a:
a5:5d:71:7b:af:7e:4b:ed:ab:19:c0:b4:d4:fb:8f:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:A1:7D:A1:16:0C:BC:55:53:D6:C5:05:9D:88:B7:FB:58:E4:FF
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:fe:e9:28:60:f7:30:57:ed:59:09:b5:b2:bd:b0:43:99:
1e:b0:ed:17:09:25:29:43:80:4b:95:3d:78:81:a1:fd:0e:7c:
a9:27:a5:e3:80:af:e5:e7:f0:32:80:8b:f1:7a:08:43:5d:1c:
bc:69:f3:b6:4f:bb:b4:6d:9f:6d:6a:da:0f:5a:aa:e8:ef:e9:
9f:47:16:a5:e3:d3:88:6d:01:5b:d6:a2:5e:d6:28:d2:bc:19:
d8:74:90:27:a7:55:9e:b4:7e:9c:6e:06:9c:6a:c2:5e:e0:0e:
1f:85:33:34:de:85:3d:82:25:ec:8c:3e:97:8b:ab:cd:24:9e:
20:07:ff:af:c5:03:73:a9:39:c3:76:db:47:d8:61:1c:3a:f8:
bd:0a:0e:21:3f:07:a7:9a:12:6c:4a:1a:eb:a4:05:55:1c:e0:
82:0d:ad:72:bd:70:e8:a8:81:1d:eb:85:8f:9e:f5:e3:28:a0:
39:0b:1a:4e:c4:88:ee:a3:4c:22:51:01:38:5c:39:e5:be:9c:
44:1c:cc:7c:4f:ba:a9:78:ec:b4:63:54:6d:f1:24:4c:fc:b8:
1a:42:b5:fd:01:a0:c7:a8:93:48:63:87:2a:7e:0f:7a:32:97:
af:81:42:56:b6:bc:c0:d7:76:64:92:71:a5:95:74:1b:f7:72:
d9:15:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:16 2025 by rpki-client