Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: /ALjOrw2px9OsdUikWUdAMkUem6Rdq5uVAJP6hpiBgg=
Subject key identifier: C7:87:9A:D9:9F:96:1B:13:D4:8E:B9:51:FA:6D:51:86:1E:BE:A0:7D
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 0197B77C9DD196D5BAAE32B3FEB3B0671A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: mlBkQFO0XiE4ZiNsXJ4JJl7YOFdx2HVtcZ9jwyMQc4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9d:d1:96:d5:ba:ae:32:b3:fe:b3:b0:67:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=c7879ad99f961b13d48eb951fa6d51861ebea07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:c5:e4:b5:90:4d:12:41:e5:0c:40:b2:53:
a1:41:85:11:91:7b:a9:51:05:cc:9e:d1:5f:86:8a:
53:fe:66:23:e7:74:5f:b3:2d:92:6a:d3:a8:b2:6a:
3c:06:47:0b:8c:fc:56:d9:15:54:70:08:2b:0f:ad:
52:ec:2a:35:b1:51:80:4d:25:35:bf:b4:4c:05:e1:
e8:06:0a:68:e7:04:73:f5:f4:3b:84:99:0c:78:e4:
64:10:8c:b7:5d:a0:90:a1:e3:f8:8f:50:bd:bd:1d:
77:fe:bc:75:c8:14:ca:a0:85:6a:25:cb:2c:d8:ed:
60:31:22:03:ad:88:1a:86:21:2e:89:61:72:c2:94:
3b:a9:12:53:8b:b8:1b:d5:5f:13:b8:96:3a:7c:05:
5b:11:04:f1:cf:c6:d9:d9:9f:b2:04:6e:d4:b9:f4:
01:ee:3c:d7:9b:15:4e:15:3c:2e:88:d6:7a:b6:05:
23:51:4b:40:cc:fa:eb:ea:f2:ff:a4:fd:85:73:d9:
0b:09:a2:31:b3:8b:cd:99:7e:bb:3e:b0:66:52:74:
4e:86:c8:8b:5e:e9:13:98:c0:78:37:34:66:24:02:
5e:ac:d0:83:07:0a:af:10:84:e8:37:39:aa:68:6c:
61:79:8a:d4:4d:2d:4c:a6:44:ce:54:4f:1c:74:37:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:9A:D9:9F:96:1B:13:D4:8E:B9:51:FA:6D:51:86:1E:BE:A0:7D
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c2:48:6b:ce:bb:7c:02:7f:49:93:d9:4c:55:81:5b:3a:ed:
d5:54:18:90:28:3b:e4:d0:94:57:2c:2f:40:0b:ba:9f:24:75:
13:95:6e:70:44:73:19:3d:b9:a0:38:41:ed:c1:8d:de:86:7b:
9e:47:aa:f3:b1:9c:4a:ab:b9:bb:80:f1:f4:e0:0d:0a:d4:da:
e7:f2:e4:61:49:94:e8:ec:fb:6e:7e:d2:a3:b2:8b:d1:1e:f5:
eb:2d:ba:3a:df:9b:86:db:a2:ea:a6:7c:88:02:52:f4:e2:87:
94:2a:6b:1f:84:a4:59:0e:d1:9f:50:f0:0e:7b:4c:f4:52:e8:
c4:a5:a3:b1:d0:40:16:db:08:27:ad:53:d4:85:9d:ff:0a:70:
cd:fb:f6:bb:b7:fa:da:7c:aa:b6:47:75:0c:de:dd:65:55:df:
d8:cb:95:0e:bb:70:a4:91:a5:15:58:17:5c:a7:ea:93:a9:38:
64:2f:db:a8:b2:18:49:ce:b3:d9:58:0c:1b:a1:0a:17:b5:7a:
36:50:f8:0e:b9:24:2d:66:17:62:d9:16:14:c6:4e:38:a0:7e:
a4:27:c6:72:e4:28:df:d3:ca:ce:1d:1b:05:be:54:b1:f3:fb:
bb:7a:ec:f9:e3:75:96:23:93:eb:6f:d5:12:f1:0c:ba:b8:bc:
94:85:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:23 2025 by rpki-client