Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier: mYvhOFczs+ODbPfZTf6dX1EKirZymXlalpew6iwqJp4=
Subject key identifier: A5:95:DA:CB:00:1F:D6:E8:58:D5:1E:BA:15:0E:E9:B2:94:E7:69:50
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 0197CB70CBF61A788C9890F073734D3F3BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number: 0539
Signing time: Wed 02 Jul 2025 14:00:56 +0000
Manifest this update: Wed 02 Jul 2025 14:00:56 +0000
Manifest next update: Thu 03 Jul 2025 14:00:56 +0000
Files and hashes: 1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=)
3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: +zCRailM/+FQGGJk+UCaIBcU+9HEiQeeQCYjbiJjs8w=)
4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)
5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:cb:f6:1a:78:8c:98:90:f0:73:73:4d:3f:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Jul 2 14:00:56 2025 GMT
Not After : Jul 3 14:00:56 2025 GMT
Subject: CN=a595dacb001fd6e858d51eba150ee9b294e76950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:2b:22:3e:52:b4:fb:1c:32:5d:b1:dc:76:
46:cf:55:79:09:64:e6:aa:67:09:d5:92:9d:46:3f:
ce:22:bf:59:d9:7a:cb:e8:61:e8:5f:42:1c:05:af:
18:35:76:3e:f2:ec:a4:4a:95:e4:32:fb:8e:d7:65:
82:24:28:43:85:b1:d2:f5:75:35:71:8a:49:6d:b5:
ef:e8:45:68:c1:fc:4b:34:75:4a:0d:f4:96:10:b8:
ca:fd:d3:bd:fe:65:3d:c4:87:2a:76:57:0f:fc:20:
d4:82:72:ba:5d:3a:e9:49:81:ce:d7:f2:65:e3:4d:
02:b1:a3:fd:30:ca:fe:e3:48:2a:42:bb:37:e8:6b:
fb:65:31:1f:e3:a5:78:91:3a:47:ca:5a:22:19:49:
27:70:b5:c0:2f:7e:62:65:dd:ad:d8:b3:15:16:b2:
f7:26:81:f0:05:b0:2f:7e:4c:1c:e5:7d:c9:be:5b:
cf:e1:0d:e3:ed:f1:81:87:ca:d2:e3:41:74:8c:43:
00:23:41:c4:92:b5:dc:2a:8c:bb:94:bf:32:37:a7:
5e:08:2a:e9:a4:c9:f9:99:0b:a0:14:fe:e4:6c:a9:
86:03:e3:20:41:dd:48:f7:19:a3:6c:df:c8:8f:2d:
f4:56:a6:c9:23:b3:e6:5a:16:65:f8:e3:b8:06:38:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:DA:CB:00:1F:D6:E8:58:D5:1E:BA:15:0E:E9:B2:94:E7:69:50
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:e5:2f:15:e9:ab:9d:68:95:6b:75:37:56:ad:9d:2b:53:
e2:28:3f:ac:fe:69:23:c9:47:c4:fa:34:38:fb:ba:9d:e8:62:
65:f9:67:3c:22:21:55:81:a8:40:ae:4f:aa:b2:02:a0:e8:c5:
a0:8d:05:9e:ba:0b:67:dd:14:ec:e8:c3:e7:05:3e:d6:15:5b:
4e:07:c2:42:a4:ed:34:99:6e:63:38:fa:1f:0a:b2:7d:41:1c:
9c:30:36:29:b1:df:41:cf:c0:b9:49:4a:d5:9d:b8:8b:b8:62:
66:b0:34:b8:b3:84:8b:ff:b3:c7:07:5b:4e:f2:61:dd:6e:73:
f1:91:86:f7:86:be:ad:1b:88:b7:ab:52:bf:01:e0:d8:ba:6c:
58:00:b3:5a:99:4b:f8:68:fc:7c:2a:d4:68:ce:33:37:a8:04:
6b:9f:6f:52:03:bb:b0:11:21:9c:cb:52:94:8d:a2:67:ab:bc:
7e:27:be:e6:c6:b2:ce:8b:0d:69:a4:7c:60:78:b6:28:d5:88:
5f:f5:2c:a8:ee:7e:39:5c:cf:c0:c5:f9:64:41:c4:a3:c5:02:
95:04:42:cb:6a:51:18:3f:09:b1:4c:18:36:52:24:5e:98:d2:
ff:87:e0:e8:30:4d:96:85:c0:09:cf:af:1e:3e:b0:38:ef:64:
79:ee:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:37:07 2025 by rpki-client