Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: iKNKoAY/aYKHzOMkXAU0XtgQyctC+/87TBYl8TGt0qg=
Subject key identifier: 15:CE:33:15:01:3E:F5:D9:2B:D1:70:61:18:99:DA:0A:B3:65:9F:BA
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0197C8707F30041FBBFD2A07B1CEE80663FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 03B0
Signing time: Wed 02 Jul 2025 00:01:45 +0000
Manifest this update: Wed 02 Jul 2025 00:01:45 +0000
Manifest next update: Thu 03 Jul 2025 00:01:45 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: 0OJnjHk92/6gef3K/R+MPmOGD6zafUXtiwbMx0huOg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:7f:30:04:1f:bb:fd:2a:07:b1:ce:e8:06:63:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jul 2 00:01:45 2025 GMT
Not After : Jul 3 00:01:45 2025 GMT
Subject: CN=15ce3315013ef5d92bd170611899da0ab3659fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:9e:29:b1:29:23:00:b0:4d:59:5f:d7:91:
bd:0b:f0:6c:88:33:23:ed:4a:77:19:a4:0d:db:86:
aa:d5:af:40:45:e6:c1:81:3a:83:ff:bc:a7:f3:f4:
fd:17:e7:87:39:ef:c6:57:71:53:8a:ab:b6:b2:79:
cd:5a:b7:6c:83:9b:b0:81:fb:47:2c:43:f3:37:ab:
c1:32:44:6b:bf:69:64:c2:17:0a:59:92:10:2b:d2:
1f:be:31:ff:e7:35:eb:a7:af:05:12:f4:57:f9:a8:
31:97:e8:1d:4e:c3:84:d1:73:2d:8e:f4:cf:a9:ed:
a0:8d:dd:73:8f:26:06:7d:0a:d1:78:20:c3:5a:dd:
78:7f:23:64:4f:91:3e:95:68:8c:b1:87:47:37:03:
ae:1d:70:52:2c:db:8e:e8:5f:42:2f:f2:ce:8c:5b:
57:60:d9:72:89:15:2d:7a:67:87:fe:7a:c0:47:1e:
be:b4:b4:2e:23:f3:25:f5:37:75:9b:33:9b:65:c9:
fc:78:f7:51:4f:fc:4e:75:86:7d:64:46:18:3a:b1:
ba:e7:d9:67:d6:89:1f:b0:db:c8:bc:db:de:e5:54:
93:5d:a3:2a:75:1e:c5:67:c1:04:4f:90:00:66:3f:
e9:cc:cd:36:71:3b:a9:7c:67:9b:e4:25:7b:3c:23:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:33:15:01:3E:F5:D9:2B:D1:70:61:18:99:DA:0A:B3:65:9F:BA
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:98:0a:a2:de:1a:7a:17:bf:a4:da:a5:d9:3a:2e:d0:84:63:
98:59:d3:35:68:a0:24:5f:e4:65:ad:8e:23:af:2a:1f:11:20:
43:84:da:0e:57:91:6d:ce:75:59:20:99:46:b6:b5:4a:df:ab:
39:d3:af:70:87:7a:ef:18:ed:30:1d:96:31:5d:73:41:05:af:
9e:ca:99:33:ff:8e:2e:2b:5b:b9:28:df:76:1c:74:9e:44:4b:
db:3f:ac:2a:5a:46:ba:f0:77:80:d7:48:ff:d7:09:96:f5:cf:
66:99:21:c6:91:98:82:da:9e:7c:2f:d4:d4:59:55:12:86:b6:
6f:a1:48:65:81:9a:56:22:3d:3b:03:7c:b5:20:d5:da:d0:db:
20:e9:ff:40:b9:ac:45:e6:aa:de:d2:d2:eb:b2:63:48:ea:70:
a8:e9:4f:07:0c:a8:09:7f:6d:77:20:d3:e4:a7:4e:49:c6:ab:
41:2a:0d:bb:72:1b:85:b8:c7:54:52:a1:57:e5:9d:2e:43:79:
92:de:65:c6:3a:ce:bd:71:9a:95:12:bb:74:bb:65:a7:12:7b:
bd:04:4a:0f:18:d9:00:1d:f9:ad:cc:72:cc:1b:ac:34:c8:56:
01:7c:97:7c:95:13:93:3a:e6:cc:e1:99:a9:35:c6:96:56:be:
3d:28:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:36:20 2025 by rpki-client