Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: 6MD1y4zRo7CBdef/9bZuWGQbOybvRh5oWCd9n4IkNNI=
Subject key identifier: 72:D6:2E:B0:B6:C5:13:15:12:E9:2E:3A:25:2D:85:A8:43:55:0A:AD
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0197B7B317FAC318AB629C686F48DB8344B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: leZyrU6rZEHSlokfothEdcUxz7CXHTSnme+jOQHvL6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:17:fa:c3:18:ab:62:9c:68:6f:48:db:83:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=72d62eb0b6c5131512e92e3a252d85a843550aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:98:67:d5:52:79:1a:a5:da:6a:a5:fb:97:
40:12:5c:35:b6:6b:52:f7:2b:d2:92:14:47:0d:a3:
76:24:60:f7:de:62:4c:e8:90:7c:d2:2c:88:82:03:
22:e8:eb:48:07:bc:c6:00:e2:61:1b:3f:13:d8:7c:
99:1f:d2:c6:d1:b5:7b:13:89:16:53:34:78:cf:36:
b6:aa:b8:75:4e:86:98:10:30:9f:1d:3a:8d:8b:37:
8f:8b:05:1d:5f:e6:8b:29:40:9d:a6:84:24:30:ce:
55:bf:7c:b8:6a:79:a3:7c:23:9e:10:55:46:fc:70:
21:67:a4:c6:ba:a1:63:d6:56:8e:e3:3e:05:87:d2:
44:47:21:4e:08:89:1e:d1:d2:dc:97:0c:e0:77:a7:
f8:de:ac:53:30:96:bb:ce:bc:f6:da:be:5d:d3:7d:
03:b5:0d:87:bd:60:e3:c2:e7:a7:9e:d8:49:0c:60:
bf:42:81:8b:9a:f2:4d:6d:b5:fb:23:5d:e6:2f:55:
97:42:fd:18:d7:a3:b1:d2:59:e4:61:5b:45:2e:ed:
d8:28:d1:9a:d1:4b:69:3c:5f:3e:91:0c:41:62:ec:
31:ce:16:e7:1c:bf:2f:15:f8:48:1f:89:bb:37:0d:
bf:7b:dc:fd:e8:6b:6b:84:b0:dd:78:41:f7:28:2d:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:2E:B0:B6:C5:13:15:12:E9:2E:3A:25:2D:85:A8:43:55:0A:AD
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e9:33:71:ca:6f:6e:98:22:5d:fd:18:12:18:5e:9d:5b:42:
c8:27:16:cf:67:30:97:90:75:e9:e7:22:c6:e3:ad:a9:87:a7:
cb:3d:85:eb:e0:f4:6e:60:bd:27:e8:d7:ec:e6:df:4e:18:d1:
6e:fc:e1:9e:55:74:84:21:a1:98:d6:1b:5d:0e:4b:96:b4:36:
f2:3e:6c:42:fe:89:9e:71:9d:e5:12:2a:a5:b8:d6:25:fe:b1:
7b:31:fc:5a:b4:2b:dc:fd:18:c8:de:cd:38:89:bf:33:8d:e0:
5a:d4:bd:b4:92:5a:3c:3a:8b:4a:20:68:74:70:04:0b:27:db:
ad:40:0b:14:6c:11:a4:2e:66:35:15:25:d4:9c:b0:9b:66:21:
c1:bf:de:4d:36:c8:8b:f0:f5:e7:ab:1b:97:36:3c:f4:e1:0c:
45:11:39:1a:17:58:c9:61:e8:0d:09:47:79:5f:05:89:ee:44:
2f:c6:e7:c8:76:06:f5:54:d9:11:eb:3c:85:0a:df:7b:49:e2:
71:ca:d1:ec:c4:04:0a:b5:e5:13:d6:bd:6d:2b:0c:80:c1:aa:
a1:f4:a4:45:02:f3:6d:0e:64:72:c5:24:7c:e3:d7:e3:ab:73:
96:aa:d7:ed:14:0e:3c:1e:27:bb:fd:fd:31:d9:15:a3:98:25:
9c:b1:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:36 2025 by rpki-client