Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: okXBVSlEh4U03eU85BNlKn1+5knIjneLG4Xbihj6jdk=
Subject key identifier: C8:24:F7:06:C0:C3:37:44:42:28:B1:26:98:A2:33:6B:F5:B6:15:E0
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0197B821359A1D07D62DA404C5C26D7D087D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
4: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (hash: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=)
5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: EGI/V+nlQTWbluixxliy09Ry9yS5qHhhe4BK5FVCMqM=)
6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:35:9a:1d:07:d6:2d:a4:04:c5:c2:6d:7d:08:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=c824f706c0c337444228b12698a2336bf5b615e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:cb:3c:20:d5:10:80:dd:23:81:2b:c0:ca:
7d:c0:1a:58:f7:f9:08:b9:ea:ba:5f:3b:1c:89:6b:
59:3f:ed:48:de:d1:ec:57:2e:08:0f:08:bb:46:d8:
ff:be:8e:da:b7:0c:7f:83:55:07:3d:ef:8e:e8:f5:
3a:fe:9d:c1:ef:90:c9:fd:64:37:58:1d:be:49:18:
6a:16:12:fe:05:a5:02:67:eb:1c:c1:58:79:18:04:
ac:d3:79:9c:d5:78:b1:90:ee:c3:79:a7:9a:05:ef:
da:e6:15:3c:a1:b6:c3:d2:07:86:1a:cd:2b:21:05:
c0:92:f0:01:05:73:c1:0b:23:cf:2b:55:57:14:0e:
0c:99:44:e9:40:3e:7f:9e:8c:a0:70:2f:fd:af:db:
94:7e:07:85:71:00:59:70:6f:83:3f:03:37:43:9a:
fb:a8:72:ed:06:5d:2f:63:c4:9c:1e:39:fd:07:e1:
ab:90:9e:13:7a:35:57:55:66:aa:a1:66:ac:66:c6:
e7:3f:90:aa:c2:9f:71:23:9a:ea:46:73:91:02:f7:
32:bf:e2:91:65:cc:84:00:e9:40:03:28:4f:4c:2d:
4d:88:58:d8:09:83:40:ca:85:f1:8c:2e:81:a4:59:
4f:28:57:b8:74:f4:31:9e:ec:6b:46:64:24:cf:1d:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:24:F7:06:C0:C3:37:44:42:28:B1:26:98:A2:33:6B:F5:B6:15:E0
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:90:5b:1d:26:21:0a:04:05:f0:bc:cf:47:08:ba:60:eb:db:
b0:26:55:c6:b4:40:c4:7c:cd:e3:0d:7b:e2:fb:14:bf:d6:3f:
ad:06:07:47:64:97:23:06:64:cd:f3:d5:ac:e0:a8:92:4a:a6:
12:cd:d3:12:2e:11:ca:73:6d:8e:83:58:28:56:03:8b:6e:7b:
4b:6f:af:03:0c:83:e4:f7:b0:78:b5:7f:32:0c:df:64:e3:fe:
d8:db:3c:a2:3e:67:7f:85:c6:54:47:46:6c:34:42:c4:57:ba:
1b:6d:7d:4c:ba:76:b5:af:cb:63:96:56:e0:ca:f2:77:8f:46:
dd:68:04:fe:b7:31:46:8b:c0:cf:50:a3:c4:d5:92:66:87:9d:
6b:86:8c:c2:32:da:e5:4b:99:b7:d4:e7:ba:f4:be:28:a8:ae:
69:df:bc:0b:e5:2a:1d:25:28:0a:ed:04:4d:6e:8a:e2:28:1e:
05:21:68:92:54:85:6a:51:95:4d:44:df:0d:dc:e8:44:81:e6:
eb:a7:07:4d:96:bf:3a:2f:b6:e3:dd:dc:13:d0:e1:49:e0:88:
be:80:e1:be:90:c0:c7:df:82:da:5b:fb:bc:32:7e:ae:94:b5:
c7:6c:d5:8c:49:df:16:4c:5e:e5:30:12:ee:7d:ac:99:ad:f2:
34:cd:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:57 2025 by rpki-client