Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: oDaNaaT5fRMYN03S7TewlsY5FE02nzWsIO9k8g4q8EQ=
Subject key identifier: 20:78:FA:1D:B0:C7:27:3D:27:C8:BA:5C:83:57:35:8E:FE:B0:09:42
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 0197B7B2EC790465054BD1A54CB21C439F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: 3HZ39BkLACOH0ZeeUL66Kk1J8Zr8YSIdGBKvYkyQ03M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ec:79:04:65:05:4b:d1:a5:4c:b2:1c:43:9f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=2078fa1db0c7273d27c8ba5c8357358efeb00942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:a2:e5:42:88:eb:7d:3b:aa:c8:8e:6f:6c:
52:12:90:5f:57:e2:b5:34:0d:0f:53:14:f8:85:fd:
fb:39:e0:f4:2b:14:ff:67:5b:80:c7:e8:e5:34:30:
09:24:43:f7:5b:70:67:be:e6:2d:05:a5:df:3b:db:
a3:77:08:e7:74:0b:41:dd:20:ea:b2:d0:47:f8:18:
c6:86:f1:5f:d3:9e:9e:e6:9e:1a:a4:47:8a:6e:a4:
98:0d:6a:98:f1:3b:bd:fa:ba:b6:c4:dc:67:29:14:
8a:5b:e6:aa:03:bf:a4:10:54:b8:c4:41:d8:4b:e0:
ce:b9:79:e1:b8:92:1d:96:13:2c:2c:b4:7f:ad:d7:
2c:18:ff:11:27:2d:dc:58:00:53:9f:5a:8d:b0:2d:
0c:f1:be:d6:a6:98:e8:19:ac:e6:66:69:d7:39:4c:
b7:10:3d:55:a4:a7:bb:e9:0a:48:dc:13:9b:12:36:
bc:6c:36:5e:35:53:9d:db:9c:4c:34:69:a7:4b:f4:
4d:f1:d4:f9:86:33:22:ee:b5:1c:f4:22:e7:9e:86:
5f:b3:4c:63:e6:dc:02:72:eb:23:51:40:23:32:97:
88:34:e3:2d:94:17:84:5a:35:f5:dc:1c:bd:1b:69:
5d:ca:25:26:d3:43:46:65:9a:68:57:56:11:8a:6b:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:FA:1D:B0:C7:27:3D:27:C8:BA:5C:83:57:35:8E:FE:B0:09:42
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ea:77:b5:b0:1a:ff:12:6c:27:d2:e9:18:c0:fe:e9:e7:e8:
30:4a:72:47:50:ac:ea:f2:a8:85:10:4b:fc:01:36:bb:28:e1:
10:ac:56:f3:7e:d8:26:25:84:fe:b2:82:50:9a:f4:63:26:31:
b9:fd:f8:cc:c0:d7:76:a7:04:d4:29:83:41:a6:1d:b0:93:59:
18:cf:24:83:9b:c7:2c:91:b5:b7:68:ea:41:11:c8:d8:91:b7:
1e:fc:ca:21:5c:d2:0c:80:d9:23:f3:d0:15:9b:13:ab:af:c1:
20:15:89:d5:4a:55:01:d7:f3:2e:71:b4:bd:2b:0c:80:2b:e5:
70:f5:91:39:b1:ae:8b:dd:b8:fa:51:65:a5:fe:48:37:8a:6b:
f5:55:e1:bb:7c:a0:b7:97:32:36:8b:54:27:eb:5d:f5:6b:37:
c0:0d:f4:77:cd:6b:a8:5c:bb:7d:a0:20:6a:60:ad:b3:d1:e6:
17:49:a6:f9:8a:25:9f:fb:27:55:bd:c8:a6:d2:4a:8a:60:d6:
7b:2f:8e:28:bc:70:3a:6c:12:8c:14:cf:fb:3a:52:8b:56:9b:
2f:3b:ad:31:36:2e:60:8f:9f:68:50:c3:3a:47:6f:19:17:62:
3d:5c:d0:05:2d:a2:da:b7:23:fb:d1:f3:dc:6a:c7:de:89:21:
9b:02:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:26 2025 by rpki-client