Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: fD/kMcOwnFAo5fAugZpq8GFp5hVNaQttejdKEeEvyKo=
Subject key identifier: 05:1F:C6:FC:2F:DD:D3:C6:E1:11:E3:B0:21:40:8C:0B:2A:94:99:44
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 0197B6D789BFC5F4BBC1172A195E5B41AAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: N9hSbedzKS35r3PRoigLU8nFDDqJsbogHomN6mNnrVY=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:89:bf:c5:f4:bb:c1:17:2a:19:5e:5b:41:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=051fc6fc2fddd3c6e111e3b021408c0b2a949944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:97:c2:82:f5:9a:53:1d:82:73:a3:f1:d0:
a6:b7:07:83:36:75:5e:e2:b3:86:4b:0c:48:e4:43:
4c:7f:81:12:9f:81:b5:0f:21:cf:aa:3f:d8:65:66:
91:90:81:6f:c3:45:f8:f5:0b:26:a8:c2:27:e7:0b:
95:5a:a7:61:1c:de:00:b2:fe:3c:42:b7:aa:78:97:
1b:16:64:14:d2:85:6b:b8:18:c0:fd:8d:d0:b5:2a:
3e:fc:a3:9e:f1:c9:ea:94:f3:82:ed:e3:ec:81:2e:
2e:94:f0:1c:cd:ef:4c:09:cc:fa:82:46:0b:21:c0:
63:c8:4a:e6:92:e3:bc:71:de:9a:74:40:4b:c9:ba:
5e:64:72:ee:0c:97:b8:45:f9:90:83:03:e4:7b:2c:
21:28:9a:8f:eb:71:29:b9:02:47:50:52:a7:95:db:
6b:79:77:a8:e6:df:82:c8:c1:b1:77:c7:b0:fd:62:
76:9b:89:8c:ef:3e:1e:44:1b:0e:3f:ab:67:cc:34:
b3:f9:12:32:0b:61:b3:0a:75:8a:c0:52:cc:fa:bd:
c6:60:66:45:1c:83:18:0d:08:71:df:10:e5:f2:55:
86:b4:3c:ae:02:86:7f:3d:ef:77:9d:03:cd:d0:dd:
b1:35:b2:f3:11:24:25:22:3a:f0:a5:5d:77:18:f1:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:C6:FC:2F:DD:D3:C6:E1:11:E3:B0:21:40:8C:0B:2A:94:99:44
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:80:e5:d2:ef:a5:b8:cc:55:db:65:52:3b:9f:99:f2:95:
84:9d:54:ae:cd:9b:99:b5:ca:fe:8f:fe:0d:03:8b:21:cb:57:
f1:b3:1b:87:9c:14:6e:3a:61:12:04:2c:07:f3:d2:3e:2c:88:
1d:07:ee:0a:96:3d:80:fd:7a:d9:90:8f:0d:ad:91:9e:73:f8:
de:77:c0:d6:91:3b:63:ff:e9:8a:c4:ce:1a:76:8f:d9:c1:48:
c0:ab:49:b9:ba:35:6e:e9:21:15:7d:cb:20:d3:95:25:3e:d1:
cf:76:52:63:e9:5b:03:cd:df:78:ec:c7:4c:ac:07:8d:ac:fe:
47:d0:35:0b:c7:1a:a5:b6:95:10:47:4b:0f:c0:7f:a7:e2:1c:
4d:c1:19:88:b2:6e:bb:50:d6:51:16:25:a8:d2:46:1c:71:37:
c4:a5:81:54:1c:74:68:28:ce:9e:17:07:32:ff:a0:26:bb:3b:
b5:37:b9:1d:60:51:89:51:03:9a:b2:88:ff:81:99:0c:51:bb:
a6:88:1e:3c:bd:ef:d4:49:88:9b:78:7b:5e:9f:7d:ac:e7:44:
99:f6:db:2b:f7:e6:25:14:c1:a5:bc:b6:dc:44:a2:3b:93:c3:
f0:03:14:3d:59:f2:5c:db:44:8e:bf:ca:a0:80:b0:f3:c4:a8:
c3:52:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client