Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier: QpXT4cT2NhHKMysTGtslcAT8lsywnEGYSyTJTa6S79w=
Subject key identifier: 2E:F7:6D:8B:83:54:86:96:74:A8:CA:76:E3:01:E8:7C:29:6F:BB:4B
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial: 0197C45C313C83B01433F5318D00E35D6BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number: 0528
Signing time: Tue 01 Jul 2025 05:01:05 +0000
Manifest this update: Tue 01 Jul 2025 05:01:05 +0000
Manifest next update: Wed 02 Jul 2025 05:01:05 +0000
Files and hashes: 1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: F6Ge82zrr85ydNgmJe/djMoAKpulllp3HYfJhuWZjz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:31:3c:83:b0:14:33:f5:31:8d:00:e3:5d:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Validity
Not Before: Jul 1 05:01:05 2025 GMT
Not After : Jul 2 05:01:05 2025 GMT
Subject: CN=2ef76d8b8354869674a8ca76e301e87c296fbb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:af:24:5e:5e:88:d2:7d:26:c9:79:f0:e6:
8e:e4:51:97:59:64:3a:77:f7:a1:f8:9b:51:f1:ab:
e6:99:e1:2b:3b:98:6f:ee:f9:f3:c4:c6:34:ea:93:
e8:7c:de:93:59:a0:16:da:c9:3d:59:eb:95:8b:65:
ed:0b:b6:1f:a7:e0:5b:75:95:b4:12:fa:43:0d:04:
66:e8:68:79:dd:81:70:b1:ba:5f:ac:b2:47:56:07:
15:bc:0e:a6:49:64:2e:2b:8f:41:bd:cb:53:32:51:
6e:3b:a2:5c:4a:9e:c6:40:f8:fa:82:c2:10:d1:0c:
16:96:ac:65:b9:6e:c3:f0:ec:94:29:b0:13:b3:b2:
7e:a7:6a:57:5f:18:61:52:b8:ae:db:e5:df:00:fe:
5a:9b:7f:a9:b2:e5:70:a0:39:6e:1b:30:50:34:07:
ad:b0:01:1e:5a:ec:79:c1:b6:a1:5c:b8:cd:d8:88:
d0:ec:9f:e1:15:73:c4:bb:f0:72:94:0e:d3:3a:0f:
c2:81:9f:3f:28:a3:4b:49:2f:37:8f:40:d6:ab:73:
0d:c1:b7:78:50:f5:13:1d:1a:1f:4a:e3:e5:f4:e8:
87:06:7f:ef:fc:62:02:87:19:cb:a6:5d:66:73:13:
6a:71:da:b4:05:23:78:a9:d8:b2:f8:9c:0f:e3:89:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:6D:8B:83:54:86:96:74:A8:CA:76:E3:01:E8:7C:29:6F:BB:4B
X509v3 Authority Key Identifier:
keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1b:b3:66:13:80:cf:91:73:54:a8:65:dc:a4:65:b8:ec:f9:
d9:4d:dc:c2:02:08:e1:2c:63:0f:cd:a5:59:4c:f8:cf:5e:91:
8f:77:7c:e1:d3:0d:72:2b:23:c5:51:45:0a:ae:92:cf:04:b2:
d1:b8:a9:55:80:af:eb:0c:a2:95:68:46:79:69:88:3d:84:ce:
80:a2:b1:97:26:9b:0d:cc:ed:c2:e2:8d:05:12:ae:e9:b4:46:
19:90:fe:16:5c:49:ab:b0:0f:bc:27:b1:96:a3:e9:c3:ea:26:
47:4b:ba:a5:73:3d:d2:2d:34:a2:d6:29:9a:c1:4b:b3:be:56:
0b:4a:d0:6a:a9:e0:d7:e8:3d:c0:d8:67:80:19:cc:27:bb:01:
43:78:77:cc:47:f5:7f:5c:d3:a1:6e:37:78:5c:c7:a9:7f:55:
78:af:52:81:c7:36:71:34:d0:1e:68:67:2f:6a:de:c8:2e:bb:
1f:d2:3a:11:d0:11:8b:8c:f2:cb:d4:73:70:29:7d:9f:9a:ab:
f6:cb:66:91:8b:4c:c0:5b:52:fa:97:46:03:04:ff:0b:3d:1c:
ec:e3:17:00:9a:7d:a7:c5:e3:3d:fb:e5:87:b1:f7:73:89:69:
51:30:3e:a3:3e:a3:1a:5b:44:e6:74:42:89:32:26:93:2b:89:
70:1b:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:10:15 2025 by rpki-client