Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: 875af6Hwtqj2DWba96QlVkxAPjqSDuL25P3RD9b3NzY=
Subject key identifier: C8:5B:5C:45:2C:34:C0:24:2F:0A:A6:BD:D5:FC:66:46:30:60:6E:4D
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0197B7B2F5C3470CBCFB9F8C7C8E5BF3746F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1526
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: VehhwhAppiCx3gwjjknHOc0F6y+rnbtXviL+nl0+BPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f5:c3:47:0c:bc:fb:9f:8c:7c:8e:5b:f3:74:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=c85b5c452c34c0242f0aa6bdd5fc664630606e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:8b:fd:33:d7:4e:e1:6d:b5:28:ae:2d:39:
f2:a9:52:a4:aa:78:8d:70:47:1f:bd:15:4b:f8:f4:
cf:cd:8d:7a:f6:30:04:86:4c:b1:ac:7a:82:6a:da:
cc:ee:f6:a7:26:89:bf:b5:a3:e8:60:b7:6f:ec:40:
21:7e:10:6a:f2:56:de:be:99:18:b6:49:b5:d5:53:
60:82:2f:2e:41:70:a5:36:f4:09:e3:00:20:18:52:
0d:f6:49:30:3f:88:38:29:18:13:03:c6:a8:48:43:
4f:b1:e4:0b:49:ce:fc:1f:b8:2f:d1:b0:3c:fa:2a:
ef:af:fe:a0:c4:66:83:03:51:32:4a:4c:c1:23:dd:
ee:9b:92:e4:f6:d3:01:48:92:c3:52:cd:01:64:2f:
e6:cd:5d:7f:c0:2b:f9:be:e2:4f:95:b9:0c:8d:7c:
23:97:e4:1b:5b:c1:a9:ad:4d:53:1d:38:32:24:5f:
bc:61:8d:b9:54:9e:a6:3a:89:14:9b:6e:5c:07:f6:
27:2a:cf:ae:d2:f3:22:21:45:25:c7:b4:17:ca:31:
35:0c:30:0c:1b:14:14:de:8a:03:4b:cb:ce:74:75:
53:f0:30:03:39:d3:88:ed:b5:bd:1c:72:c2:a8:0b:
7b:12:07:91:bc:eb:0a:b6:71:84:5a:d3:e9:eb:87:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:5C:45:2C:34:C0:24:2F:0A:A6:BD:D5:FC:66:46:30:60:6E:4D
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:88:06:06:d7:52:03:07:82:f5:18:11:07:f6:02:46:68:d3:
72:f8:49:7e:25:1a:9d:70:65:2d:d8:3a:86:5e:f5:1c:22:36:
2b:ef:1d:d2:fd:bf:f1:ab:3b:94:b4:3c:cb:d5:bc:44:70:9c:
b3:dd:06:4a:f4:ea:6b:8b:b0:fe:f6:e4:69:76:01:43:0e:7e:
8f:a4:88:84:7b:90:c3:a6:1d:6c:fe:cc:67:9e:c8:b1:cf:b1:
85:22:89:0d:a0:59:38:c9:89:aa:99:f1:6a:cf:fa:ce:7a:07:
53:36:61:5f:15:12:1f:df:ab:2d:8b:d8:2d:46:a1:34:ce:c4:
ea:6a:4d:d0:27:42:b3:75:92:28:bb:77:10:b0:d1:67:9b:0d:
be:85:be:1d:52:92:8b:bf:5f:a4:bf:d5:a7:ab:a4:89:ab:62:
7c:76:d1:54:0f:a7:9b:93:56:fd:a4:2c:2e:01:22:d2:f2:8d:
38:48:2a:4f:5c:1e:85:67:21:b1:3a:8f:a1:39:e9:91:bd:4f:
d1:bb:3b:6f:41:70:19:4c:af:6c:96:19:e7:a7:d5:7e:fd:d7:
9d:df:1e:9b:5b:d4:45:0d:dd:96:f3:04:bd:d3:25:b0:19:72:
91:06:aa:31:49:67:b7:64:66:dc:39:b5:a4:1d:60:9d:83:cf:
b4:0e:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:25 2025 by rpki-client