Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File: XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier: ko9DVpQeTzRewhi0SfGjhW/PHkLqtqB0Cc2sE288IRo=
Subject key identifier: 8C:FB:DF:F7:5A:6D:8A:A6:CD:41:D4:3E:A7:1A:31:D6:09:57:F0:98
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 0197B857AEFBB0E703E3BCF99A0CB21A115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: KGLhnOtOH4dX4vgy-roccfFwMa0.roa (hash: Q+cux+R5PAR0o25xtkFz855zy5Yln4wHE6v90utYbJQ=)
2: Uyxb19QbZRCxbhE27fnbxseC3Oc.roa (hash: BnjOueluG7H/015ihaAL3TJm9SFqiqVP5xJ7qb5hKFU=)
3: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: 9rFyuQBjDhwiJdhHQBcB82ylTZ2obKBKYAMadTCVpdc=)
4: pjuwfv3bsHCpq2bUzmpShMFHNQw.roa (hash: Hy8/ILbDAQXBmLpCF9rnEz7CfpQmiaJg4wOv9IAGHBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ae:fb:b0:e7:03:e3:bc:f9:9a:0c:b2:1a:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=8cfbdff75a6d8aa6cd41d43ea71a31d60957f098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:fd:a2:cd:81:ee:53:69:16:3e:e8:66:f8:
d5:51:12:cc:62:fd:d8:ce:9c:bb:41:5e:41:3b:23:
27:14:cf:79:90:f9:f3:f0:d1:c4:bc:b7:92:1e:fc:
ff:01:b8:b6:14:7f:cb:38:be:48:91:1d:7c:00:23:
6c:71:5b:af:3e:84:5b:c5:b2:65:eb:20:88:5d:3c:
b0:0f:57:be:89:4c:e6:5a:33:d6:84:b5:e4:7f:8b:
3b:d9:fe:ea:47:4e:d6:de:dc:3a:64:97:c8:bc:d9:
11:a5:94:0f:40:5a:7a:f2:33:38:89:75:cf:1e:57:
9c:ac:17:f5:bb:c2:0d:e2:37:49:1c:bc:4f:02:7f:
d0:ce:40:72:4a:85:8e:c7:ff:1e:57:5a:53:7f:d6:
64:9b:1d:f9:3f:56:f6:80:d7:3b:f9:6c:0c:44:76:
eb:30:ed:15:3c:eb:13:47:a4:8d:5c:73:3d:f3:cf:
90:07:c1:13:ab:47:a7:4a:57:78:5e:2b:8e:28:1b:
85:24:c7:b2:fa:5f:eb:1b:65:01:00:cf:ec:33:ee:
29:c1:da:6b:ec:c6:6d:37:d5:bf:b8:27:48:74:11:
c9:99:92:a9:ac:ce:80:94:e2:e6:73:e7:cb:5f:8c:
c1:c7:21:a7:76:16:b3:4e:ae:a0:d8:d4:9b:40:13:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:DF:F7:5A:6D:8A:A6:CD:41:D4:3E:A7:1A:31:D6:09:57:F0:98
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:aa:9c:2b:40:09:e4:1a:e1:4b:94:58:b9:21:a4:6a:2f:f4:
91:c7:f1:fe:cd:0f:c8:bc:6c:5e:09:fe:f6:be:2d:72:54:12:
8f:66:00:a9:6b:f1:61:03:32:81:34:b2:32:2c:d8:81:7c:92:
0d:1e:ab:75:a0:19:a1:89:19:9b:a0:98:19:6f:12:4d:4b:54:
78:a7:a2:21:f7:e7:90:62:d4:ec:a3:71:3c:f0:de:c0:eb:c8:
48:ae:98:94:95:0a:17:ee:d2:b5:0a:a3:a2:ab:91:f8:8e:b0:
50:2a:7d:87:d4:e2:6e:18:1d:9a:ed:dc:02:27:c5:6b:9e:82:
16:81:15:d7:9a:93:e4:77:3c:a8:7e:00:b9:66:51:64:21:12:
19:c6:50:2e:83:67:20:2a:c6:8b:fc:2c:6c:e6:d3:91:33:7f:
d6:de:15:18:b3:72:e0:60:79:91:b9:91:35:28:ef:af:12:66:
32:ba:97:0c:e9:52:14:8b:b0:4d:72:0c:a5:b6:a2:56:bd:d0:
08:8f:fd:da:a6:44:09:b3:de:85:b8:2a:b0:93:a1:a8:a8:4c:
60:ee:b9:93:c4:25:d1:e8:1d:36:ac:ef:91:a9:6c:fe:a4:de:
67:23:23:37:d0:7f:cb:f6:a7:72:d7:ca:8c:28:4b:b3:da:7e:
9a:37:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:01 2025 by rpki-client