Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: Mh2e4KCFAdz+mDlhc1NRISXAEoN5oaPER+FPU/a6sjs=
Subject key identifier: D4:7E:31:ED:15:F6:3E:9F:0D:F9:E4:59:C4:5E:E2:0B:64:BE:B5:7C
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0197C56E9303D7937BF6ADD0C861B75BF6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 10:00:47 +0000
Manifest this update: Tue 01 Jul 2025 10:00:47 +0000
Manifest next update: Wed 02 Jul 2025 10:00:47 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: d/WiWw75/d0mj8zsNkYI+PFjRdv4FMgXRBfWX1EJrfI=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:93:03:d7:93:7b:f6:ad:d0:c8:61:b7:5b:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jul 1 10:00:47 2025 GMT
Not After : Jul 2 10:00:47 2025 GMT
Subject: CN=d47e31ed15f63e9f0df9e459c45ee20b64beb57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:e6:c9:31:1d:8f:34:2b:86:74:45:83:dd:
b4:7a:16:2e:f1:a2:c7:38:5d:eb:67:64:d3:11:c2:
7e:ff:51:be:d1:b1:de:44:22:3c:87:a4:00:2e:a5:
3e:ee:c8:37:73:84:90:46:e3:b6:dd:8f:93:41:5c:
c4:9f:ba:46:81:fa:ad:8b:74:bd:f6:d2:9f:94:fc:
e9:6d:a6:bd:53:25:db:db:91:f0:e7:c0:d3:e1:eb:
27:be:4e:ce:c4:1e:b7:c2:45:14:c3:12:61:72:90:
63:0a:ac:eb:e0:af:32:aa:a6:23:bb:ba:43:c9:77:
06:f4:ba:86:d4:e3:7c:5f:dd:20:75:ed:06:b8:33:
1d:79:a4:64:64:05:9f:b5:ec:ea:9b:c3:12:ef:5e:
28:f5:2a:5b:ef:df:3e:53:14:73:0a:97:30:f6:f0:
cb:7f:b6:a0:86:bf:5d:86:82:25:b3:0a:79:0f:dd:
21:2c:78:df:c1:e2:57:27:1f:c5:9f:9a:98:70:f4:
69:ff:b6:c1:bd:01:80:8d:15:5f:d7:61:d8:be:3b:
b9:e2:c1:37:a7:ab:f8:8c:13:aa:4e:e5:84:21:2a:
cc:4d:d5:9c:5c:00:bc:41:4f:16:bc:2a:6a:c7:35:
80:9a:d9:fd:0b:24:83:63:c3:39:32:61:87:28:6b:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:31:ED:15:F6:3E:9F:0D:F9:E4:59:C4:5E:E2:0B:64:BE:B5:7C
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6c:48:0f:82:3f:08:4f:df:1a:82:e9:85:97:99:cc:4d:9b:
e0:95:54:74:f9:83:e7:95:6f:a6:05:d4:02:d4:0c:e0:97:0e:
82:a6:0d:96:61:a0:4d:8d:2e:fc:0f:f7:55:93:4e:73:4c:ea:
b0:9b:9e:06:82:8e:75:91:3c:fc:f6:6f:dc:09:7d:57:66:69:
78:20:52:b2:95:f3:4c:5c:ae:47:be:cf:f2:f2:cf:97:af:8b:
fd:89:f4:f3:b0:eb:20:b9:44:c8:81:85:9f:e3:d9:c0:d1:67:
91:47:8e:c6:46:4a:fa:09:74:80:d7:7d:3d:8c:2e:a0:28:14:
b7:0e:96:2c:3f:d4:07:46:a8:c5:4d:aa:ae:69:71:00:5d:90:
97:cb:5f:93:2e:5a:c8:17:09:86:27:45:88:10:91:44:73:ac:
ea:3b:69:d5:f4:d9:91:0c:52:e2:48:4f:eb:ab:51:37:fd:05:
9a:15:2a:67:ad:fb:14:84:16:84:da:e3:86:e5:a0:a3:03:a0:
6e:a7:06:b3:ec:88:96:df:c3:f3:cb:59:ae:c5:d2:7c:61:a7:
52:5d:22:28:6a:1b:e1:84:46:ea:06:7f:28:70:1c:73:f2:e0:
27:b1:01:a2:da:71:42:38:0a:d7:d2:0a:9c:e5:d9:ae:a9:30:
40:63:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:45 2025 by rpki-client