Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: 6fdYUYlBInHDCAvVWZanrbDJ4CN67uE9AwlcMI6wd1o=
Subject key identifier: 54:15:89:68:0F:58:55:80:3C:7D:0F:6B:5E:76:94:40:2B:16:89:CD
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 0197B7EA49FA1CF7FFBF83CA8D8ABF3F299E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: B2
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: X6q9Pn37oNcrFmGaGAyo7VIhEI7o31VwkC8ztX0KFWk=)
2: aiQzKvCLxoc-jbSifPWI0H5s0EY.roa (hash: 2MNoWPbLxGTHxE75GVGoT7L//M3cbhmYnAI81N0/HEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:49:fa:1c:f7:ff:bf:83:ca:8d:8a:bf:3f:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=541589680f5855803c7d0f6b5e7694402b1689cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:02:92:f0:fa:d6:d7:7c:a2:58:b9:24:55:
3b:05:92:f5:ac:9b:c5:de:eb:87:61:2e:ab:32:7d:
30:55:52:aa:cd:ba:90:43:82:66:84:f0:66:6e:e7:
14:65:8e:64:8d:2c:8e:a9:9b:c1:bd:6f:55:79:dc:
13:d7:e6:68:15:7a:67:e7:3b:ca:36:8b:1c:06:f7:
65:ef:f5:b2:ee:15:2f:2b:27:8e:f4:bb:44:8b:a4:
b4:b0:5e:0c:43:2b:48:bb:f4:df:37:ac:df:50:67:
8d:6b:04:84:f6:aa:25:88:3e:1c:f8:d0:9e:a2:49:
78:84:72:ad:5d:22:8b:fc:54:44:2f:e2:23:69:62:
cc:b6:6f:5b:58:ac:06:8f:00:b6:1d:7f:3e:8c:93:
28:a1:e9:97:89:e1:a4:13:dd:23:a3:ce:6c:72:0d:
e0:c3:6c:8a:6e:f5:a2:09:96:e8:3c:6b:af:2f:da:
63:6d:f7:3e:f4:c6:69:53:c3:62:ea:a5:24:89:20:
49:2a:93:bd:76:36:aa:d8:d4:d0:be:ee:e1:e6:f0:
93:ac:82:6a:8f:62:62:4f:ad:01:42:0a:43:1a:98:
64:b1:a9:72:55:89:73:15:49:7f:3d:82:72:c3:62:
4b:c4:b7:15:26:a0:60:3e:5a:ef:3c:3f:4e:de:43:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:89:68:0F:58:55:80:3C:7D:0F:6B:5E:76:94:40:2B:16:89:CD
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:20:7c:df:43:ff:e8:af:3f:d5:65:e2:f2:9d:65:41:55:
de:5c:3a:67:1d:65:c9:35:de:6d:77:f2:55:c9:f6:ac:90:29:
b9:a9:5d:8c:8d:6c:c2:4b:98:b2:76:c2:5a:b9:1d:4f:20:f7:
40:1b:b9:b4:4f:36:e5:13:47:7f:90:5a:54:55:76:72:15:20:
21:d7:74:08:17:66:c0:45:66:b9:0f:a7:2d:48:71:9f:49:1d:
52:ab:fd:5f:5c:59:68:a9:8a:eb:55:0c:c9:de:fd:06:df:c7:
0b:99:c4:51:8d:ed:25:15:75:50:07:7c:58:b4:60:03:30:7f:
c1:60:9e:28:8f:c3:a9:41:d5:e4:f0:9a:b0:4a:4b:47:8a:22:
55:f5:2c:52:d0:bd:13:e4:90:d9:ca:4f:c4:7a:5b:c6:05:38:
78:4c:3e:36:15:58:6d:f2:46:16:2c:a3:a0:cd:ef:ca:75:af:
b4:de:7b:ed:53:c1:c8:66:1e:e7:8d:b0:3f:83:8c:62:b5:a2:
f3:e1:71:fe:de:6c:c5:c3:12:e7:9d:39:f6:ed:80:13:86:99:
be:10:56:7e:ab:4f:e6:29:1d:b4:e3:69:55:5d:fb:5f:93:8a:
f3:91:86:b5:14:10:67:95:05:a4:d1:ac:0a:e1:ae:df:89:61:
4f:7b:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client