Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: oGc8v+zt9cbwDMsDt/jThJtuW9werlFESxLSRqpYJ5g=
Subject key identifier: A5:F1:E0:76:46:44:AE:DF:D3:B2:32:28:FF:C6:F5:EC:C4:E0:66:EA
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0197B7B34F10667D81C1FC9F7C45543DC4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1217
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: 2/yDMnoONfXUP5wimBuvZczRhhKxbEINRyhCNeI+LX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4f:10:66:7d:81:c1:fc:9f:7c:45:54:3d:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=a5f1e0764644aedfd3b23228ffc6f5ecc4e066ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:44:a7:29:0f:b4:04:a2:72:90:e0:1a:1d:
b5:8e:42:47:fd:e3:b4:b6:1a:47:c5:14:55:90:dd:
40:5c:98:15:50:c5:05:a4:f1:af:70:88:74:c1:bb:
d3:9f:4b:0e:70:5e:63:c3:6e:27:76:61:d3:91:74:
0d:2d:a8:32:3a:39:ac:0e:4b:f0:bb:ce:99:89:74:
ff:c9:a3:d3:1c:06:fe:14:fe:23:b1:ad:70:f1:14:
01:2b:df:51:5e:63:33:d7:31:77:d0:66:2c:05:ae:
27:eb:62:df:5b:55:34:48:ec:7e:96:e0:69:74:2c:
94:6d:2f:94:77:34:25:b0:d9:72:72:58:75:4a:ae:
2d:7a:22:d6:3a:7e:b8:0d:c3:d3:8a:97:ca:dc:2f:
1c:0a:da:f4:0e:8a:1a:44:94:25:dc:77:38:33:7e:
51:6f:23:0a:17:05:c4:3f:fe:37:7d:54:60:f5:71:
99:a2:c0:0a:18:3c:44:b6:eb:f2:b3:7b:35:41:c8:
c1:44:4e:af:97:3d:46:1c:a1:37:f7:1f:9f:b3:6c:
59:09:38:cb:e0:62:fe:52:fd:74:e5:dc:9e:3c:9a:
96:88:05:89:ef:32:6b:d6:10:4b:7b:fd:b3:5b:d4:
2a:d2:af:8b:7f:68:ab:3b:05:64:12:6e:e2:2b:e9:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:E0:76:46:44:AE:DF:D3:B2:32:28:FF:C6:F5:EC:C4:E0:66:EA
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:93:cb:1e:48:8b:f9:7a:3c:46:4e:0a:10:2c:b4:19:47:cc:
36:10:de:c8:7b:9f:16:8a:1d:d7:e2:63:6c:ab:5b:1b:43:8e:
d8:2b:53:cf:2e:2b:61:9b:b1:79:e7:17:b5:ee:74:9b:bf:08:
35:c9:52:0c:fe:15:16:2f:6e:4a:f6:77:40:db:1a:4d:b2:99:
28:57:e1:a1:dc:52:0d:67:75:d5:01:78:6e:d0:26:51:fd:ff:
cd:f7:a9:fa:5b:08:7a:0d:99:9f:7e:09:07:cf:01:7b:32:b3:
16:45:d9:00:a6:56:78:ed:bf:f1:22:fe:f5:ea:24:a0:f5:a1:
e1:a5:0d:ba:ea:44:37:0a:54:09:04:42:0b:07:5f:b2:59:95:
a5:e8:b8:ed:37:66:e8:7a:1d:96:e4:c3:8b:df:f0:2e:1e:e4:
d7:42:8c:df:63:f1:c6:62:e2:73:60:c3:32:2a:86:50:2d:20:
d3:48:5c:95:6e:bb:b6:5b:36:95:60:05:c3:8a:09:bc:e2:c8:
c6:02:2b:aa:1d:4f:60:ab:2c:ff:3f:1d:27:67:6e:a9:3a:a0:
ba:c5:5e:6b:27:0b:90:2b:ac:e0:05:88:27:95:c8:3a:8b:5a:
82:be:80:00:f7:a3:ac:71:1f:a4:8a:39:3d:0f:ba:4c:3f:ae:
1a:8f:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:39 2025 by rpki-client