Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: 7yb/HYd9Mmk1/Rmgs2y6HtPfoL3Z8vi6jmra5Gq0/9s=
Subject key identifier: 5C:10:7E:74:AA:A9:46:11:19:5A:4E:3B:E7:A9:B2:62:8A:7F:5E:6D
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 0197BA7D674AC99FF0AA01150ABFE3A758BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 07:01:09 +0000
Manifest this update: Sun 29 Jun 2025 07:01:09 +0000
Manifest next update: Mon 30 Jun 2025 07:01:09 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: XpjUbC4UGvgjHdOGNQzWgdaaaUx/jTjCMrXuFAPEXkU=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:67:4a:c9:9f:f0:aa:01:15:0a:bf:e3:a7:58:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jun 29 07:01:09 2025 GMT
Not After : Jun 30 07:01:09 2025 GMT
Subject: CN=5c107e74aaa94611195a4e3be7a9b2628a7f5e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:de:b2:cf:5c:e3:75:1f:b6:c0:35:8f:39:
8c:0f:b7:a0:c2:41:22:36:6c:b7:20:53:3c:99:72:
f9:59:bc:ab:6d:d0:6a:5d:9f:a1:6b:62:e4:19:2e:
c6:d4:e7:f6:d6:c8:e6:1e:ec:b5:48:75:31:69:51:
5f:41:10:27:72:0b:13:1d:61:62:af:a6:e6:ab:0c:
7c:11:f2:97:ad:d5:98:bb:eb:a6:5c:b1:75:17:c2:
3e:d5:fd:4a:1a:83:5e:29:29:6e:c3:68:c2:e5:cd:
59:9d:b5:5b:1a:e4:31:c3:cf:a6:0e:40:7d:ac:49:
02:40:85:2b:52:70:0a:b0:29:18:36:99:68:24:65:
77:8b:1d:e1:c0:30:e6:a9:8f:e7:a6:f9:c9:9f:46:
83:d6:f1:04:22:56:9d:96:02:7f:22:ba:51:3e:da:
6f:b3:15:d1:81:32:74:91:e0:fb:df:ba:ed:c3:70:
5e:d3:d1:8d:d0:79:09:9b:44:f3:00:94:d8:dd:31:
47:5b:1b:a4:2d:00:e3:6b:d8:d4:7f:fa:88:c1:50:
59:eb:e4:ef:38:ea:82:db:f0:f9:3a:2d:d0:fa:23:
8b:e8:b5:a8:f2:fa:e0:ba:7a:03:75:51:88:0c:63:
81:ff:35:7a:1e:ef:30:5d:35:54:15:cd:a3:5f:e9:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:7E:74:AA:A9:46:11:19:5A:4E:3B:E7:A9:B2:62:8A:7F:5E:6D
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b7:d5:6c:b5:2c:a4:28:34:17:89:93:17:20:5d:90:e8:b9:
59:3a:1b:1c:8e:91:74:6f:d1:5a:57:be:ce:f1:61:66:48:f1:
79:b3:89:1d:15:1d:ff:80:e4:d4:dd:ef:82:7e:aa:f9:e2:c2:
a6:95:e1:8e:af:e7:e4:d4:24:e8:cc:93:e1:29:38:b0:16:ed:
fd:df:02:f6:48:81:9b:50:75:dc:7d:3a:87:53:9d:9a:c4:20:
8f:c0:0b:4c:0c:85:c3:b4:91:05:c2:7b:67:c5:c0:5f:4a:bc:
c0:58:62:c5:a7:01:ce:b2:55:39:d5:a5:53:64:e3:29:39:90:
21:58:aa:7e:c4:6b:07:f2:03:6c:5e:68:5d:23:8d:8b:16:90:
fd:59:2c:cd:e8:46:d7:ef:31:cd:8a:b9:8f:7e:23:df:20:bb:
f7:92:5e:d0:88:ef:a2:aa:bd:94:75:92:20:24:1a:f9:6d:53:
8e:a9:01:7c:ed:24:75:57:39:53:65:55:e4:ec:74:a6:9c:53:
25:bd:2b:ec:ad:d4:48:45:9c:25:71:1c:c4:c6:2e:38:71:40:
47:79:e0:dc:1f:6f:35:3e:1a:47:bf:2e:21:d2:0f:a2:4d:1d:
11:da:e2:83:6f:41:46:20:5a:dc:12:ae:d2:c0:d5:b7:8d:f6:
37:60:05:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fWdKyZ/wqgEVCr/jp1i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjUwNjI5MDcwMTA5WhcNMjUwNjMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg1YzEwN2U3NGFhYTk0NjExMTk1YTRlM2JlN2E5YjI2MjhhN2Y1ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F/ess9c43UftsA1jzmMD7egwkEi
Nmy3IFM8mXL5WbyrbdBqXZ+ha2LkGS7G1Of21sjmHuy1SHUxaVFfQRAncgsTHWFi
r6bmqwx8EfKXrdWYu+umXLF1F8I+1f1KGoNeKSluw2jC5c1ZnbVbGuQxw8+mDkB9
rEkCQIUrUnAKsCkYNploJGV3ix3hwDDmqY/npvnJn0aD1vEEIladlgJ/IrpRPtpv
sxXRgTJ0keD737rtw3Be09GN0HkJm0TzAJTY3TFHWxukLQDja9jUf/qIwVBZ6+Tv
OOqC2/D5Oi3Q+iOL6LWo8vrgunoDdVGIDGOB/zV6Hu8wXTVUFc2jX+kywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwQfnSqqUYRGVpOO+epsmKKf15tMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrfVbLUs
pCg0F4mTFyBdkOi5WTobHI6RdG/RWle+zvFhZkjxebOJHRUd/4Dk1N3vgn6q+eLC
ppXhjq/n5NQk6MyT4Sk4sBbt/d8C9kiBm1B13H06h1OdmsQgj8ALTAyFw7SRBcJ7
Z8XAX0q8wFhixacBzrJVOdWlU2TjKTmQIViqfsRrB/IDbF5oXSONixaQ/VkszehG
1+8xzYq5j34j3yC795Je0Ijvoqq9lHWSICQa+W1TjqkBfO0kdVc5U2VV5Ox0ppxT
Jb0r7K3USEWcJXEcxMYuOHFAR3ng3B9vNT4aR78uIdIPok0dEdrig29BRiBa3BKu
0sDVt432N2AF4A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:44 2025 by rpki-client