Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: hz5Evz0rsq7pK8V8SFkIugIsqT5j+2w6nmZlbSccA/o=
Subject key identifier: A4:AC:CE:01:A8:3F:87:46:BE:E8:7E:14:09:EC:89:37:53:31:3F:96
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 0197B6A0D65A9142A0ADBEDAC6ACE6C2F0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: 7cAwnT2fTLiSVuxedVSALc+i37xpxktfYtK95oOMjXQ=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d6:5a:91:42:a0:ad:be:da:c6:ac:e6:c2:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=a4acce01a83f8746bee87e1409ec893753313f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:14:b5:83:6b:e3:af:6d:23:bb:a2:23:c2:
7c:7d:4a:1b:23:9f:c2:3d:ac:37:3b:a2:d1:fd:08:
d8:31:f2:9f:7b:b6:fa:f8:08:79:8d:e3:39:fb:0e:
67:b9:77:a7:cd:9b:93:5e:c2:f1:83:74:60:7e:ef:
c3:c8:df:c6:91:e3:db:90:32:6e:a8:fa:a2:f5:b7:
6a:5d:2b:96:bc:91:fe:1d:c5:89:7a:14:74:79:70:
2b:fa:ba:72:46:9d:cd:09:5f:2c:cd:2a:51:a0:68:
51:2d:ee:e3:b6:4e:a6:0f:21:3f:2b:1c:4a:f9:14:
a6:4c:9c:d4:23:b0:68:c4:fb:60:6c:7d:cb:c8:99:
bf:6e:11:f4:c9:b4:10:d4:a9:d2:f4:42:61:6e:5a:
d1:ba:ab:f8:3d:b9:59:e2:da:23:f9:43:11:49:fe:
3f:79:d0:e7:79:cb:4d:26:4b:0c:b3:76:21:39:a8:
6a:75:f1:a5:5a:73:0a:03:92:9b:98:cc:c2:69:0c:
e2:33:9a:6b:fc:eb:6f:74:68:e3:93:24:57:9e:26:
c9:b9:07:d7:54:cc:4e:97:2d:ff:1b:02:01:18:40:
6e:25:53:21:fc:12:81:5c:b3:bd:8d:7a:90:84:fc:
13:68:d7:b8:c2:46:93:87:7f:09:89:44:86:45:f8:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:CE:01:A8:3F:87:46:BE:E8:7E:14:09:EC:89:37:53:31:3F:96
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:d6:de:2b:49:d2:39:78:8d:06:f8:dd:c9:95:5f:38:e0:
90:6c:5c:72:7b:01:70:20:cc:f5:be:8f:d0:4e:16:a3:81:79:
d5:3d:0c:33:47:2b:19:de:c2:aa:ee:f2:c4:95:2b:c1:f8:32:
2e:48:d4:e8:2c:ab:38:3a:82:8f:12:c7:c6:06:74:69:c5:5d:
83:b5:aa:3d:72:b8:61:25:fb:65:aa:e5:cb:93:80:b1:c0:1d:
db:15:20:d9:82:88:b7:f1:d9:c1:70:f0:81:4a:7c:b7:73:91:
bb:c3:b6:25:5f:0f:b6:d5:c5:12:4d:99:40:c3:14:d1:fb:3e:
95:f1:34:a6:6c:a3:b8:45:ac:d2:41:86:1e:b4:8a:46:9b:3a:
8a:31:c5:a4:2b:b6:68:57:fe:63:e3:f9:a3:3e:b8:4a:d5:54:
fb:14:f5:41:de:29:7b:92:f1:cd:40:0b:91:3b:15:89:07:ea:
ae:ff:23:92:6f:01:d4:85:11:a4:d7:4c:c0:09:be:ae:7c:40:
01:6b:2a:5d:9f:4a:7c:82:a7:36:5c:28:16:77:23:d8:00:94:
36:65:e7:69:62:18:9f:ea:d1:02:fc:ac:9d:f1:b0:46:4c:35:
8a:38:dd:2a:9c:7d:b4:1a:c7:5c:cf:2d:d3:00:97:01:9e:3f:
a0:d4:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:20 2025 by rpki-client