Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: 1LrqXgVv1ZXxUyj0GhIRlzV5CZwHeFhKBKfNCoi/gs0=
Subject key identifier: 79:1F:B7:E0:B4:00:05:ED:F7:28:17:A6:F8:28:5B:3E:02:D9:5C:94
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0197B7B35459A924AF21521A4B182BEF4C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 11F1
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: Wn4DQfJB5mN4oRqHyzyA4NCustdfaXHECvkc6yqAWQ0=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:54:59:a9:24:af:21:52:1a:4b:18:2b:ef:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=791fb7e0b40005edf72817a6f8285b3e02d95c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:89:87:03:fc:df:bd:df:c1:3e:c3:13:5d:
12:76:54:00:6c:8d:49:3b:ea:a7:47:9a:c9:ba:13:
f8:c8:db:89:38:65:ef:b7:85:03:f9:5d:b2:dc:b6:
1e:fa:96:5d:47:e8:97:1a:ef:e5:ac:d8:e4:19:d8:
e8:ab:70:9e:48:50:ab:3f:7b:32:6b:18:ea:55:cd:
7d:70:0a:23:56:28:56:04:ea:6a:02:02:86:d3:1a:
b1:40:7e:2e:07:63:aa:64:83:9c:75:33:25:c6:6f:
48:64:8b:93:55:97:2c:9a:df:8a:34:cc:d6:03:fa:
d1:85:17:2f:9f:df:9e:70:3a:20:53:c2:c1:77:99:
4d:17:1b:27:1d:8e:50:ee:8a:c9:31:3c:90:c9:f7:
14:59:5c:3e:08:98:e7:53:ba:73:5d:c0:0c:37:3c:
e3:9e:e4:36:8d:a0:65:b8:bc:2d:11:f7:35:7d:f6:
5d:01:fa:15:08:80:2a:6b:6c:1a:36:02:84:8f:59:
70:a3:d5:c0:fc:66:b0:ec:ed:f4:22:5a:a9:8a:33:
23:ec:60:ec:a4:c5:04:d7:5f:35:2a:1a:61:f8:a8:
00:fa:61:74:9b:0f:fb:47:23:2e:cb:a6:17:f9:bb:
91:eb:71:52:90:7b:26:19:d1:88:1d:45:49:be:ce:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:B7:E0:B4:00:05:ED:F7:28:17:A6:F8:28:5B:3E:02:D9:5C:94
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b6:54:3f:26:58:c6:d0:1c:fa:3c:d9:0d:c3:26:ea:92:60:
af:8c:f4:f6:53:1b:aa:19:8f:fc:47:28:09:67:e0:90:be:60:
b2:7a:49:23:48:a0:62:83:12:34:50:04:d5:bc:a0:c9:f6:d2:
2f:49:c4:8f:89:a7:1c:0c:aa:80:65:67:31:39:7d:cf:14:ec:
10:e3:2f:b3:d3:03:85:68:1f:c5:d9:97:c4:dd:c7:44:c2:dd:
f9:86:54:86:7a:30:92:b6:20:b5:06:e2:d9:bd:ef:78:e1:cf:
28:4a:03:8b:07:f6:9d:9d:95:0f:fe:d1:ff:02:f9:95:91:c5:
5b:e4:c1:db:b1:e2:fd:1e:60:22:6c:ec:19:d6:89:35:d9:f0:
2c:48:19:40:f2:5f:12:0d:dd:ca:e0:ac:31:58:93:6e:07:df:
12:f1:87:51:96:7a:70:4e:25:4c:57:fb:65:c8:f1:91:76:08:
c7:73:f3:d3:47:aa:65:80:6f:c1:16:4a:90:63:4c:bf:36:b3:
85:06:ac:7e:8f:ba:48:8e:50:0a:88:fb:13:31:43:94:0f:ea:
f0:85:93:04:67:3f:90:ef:55:47:e0:a8:65:17:62:45:a4:65:
9a:4b:94:be:0a:01:c7:7c:4e:17:0e:d6:3b:55:67:b2:6f:99:
a8:bf:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:07 2025 by rpki-client