Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: ahAUpNbmtX3jqH/3mtXYKNHiy7KvD0+BMcrZw2SF8P8=
Subject key identifier: 59:4B:D7:A6:EB:93:40:10:E8:66:B7:C0:27:74:17:A7:FA:21:81:61
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 0197B745B01DFE723ADED18F40219EE4E949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0DE6
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: bK/Hiz1vr6jiZBDIhATCvGIpOgyVaGdKtCZ2kUZ+hPA=)
2: rCcV6Zewu1Z9eZJuSlVmU21XPSI.roa (hash: faeDhvfDA6I7kGgODqOk5x1S+G4V8KqFh6Vs8sDfnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b0:1d:fe:72:3a:de:d1:8f:40:21:9e:e4:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=594bd7a6eb934010e866b7c0277417a7fa218161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:f4:2b:0f:d6:05:06:dd:34:85:0d:a6:fd:
e2:93:9d:54:66:74:0b:30:9c:3b:ff:73:28:0b:ff:
7f:65:33:33:9f:38:55:9d:2e:51:23:a8:da:9b:fe:
9a:8d:f6:1e:2b:ab:71:25:ae:e0:22:4b:46:e3:c8:
cc:13:bc:79:9d:41:26:7f:37:94:69:18:c8:80:2b:
a5:d7:fa:09:fe:16:6d:fb:fe:b9:b4:ff:b0:44:6f:
8e:72:05:c7:c9:d5:1d:84:6f:a3:59:a4:a8:6e:be:
5e:11:c3:be:63:b9:2e:ca:e6:df:6c:90:db:96:1a:
cc:17:f5:9d:59:bf:bc:11:e2:57:ca:ff:fd:34:1e:
cb:9b:c0:cd:2b:22:73:98:9f:88:5f:11:c9:38:e5:
5b:07:33:b9:92:b1:11:d4:51:44:8d:aa:00:05:ea:
33:74:cf:cc:42:4f:bb:f0:b7:d1:27:45:c4:88:03:
7a:30:5a:80:ea:79:25:4a:0b:4f:aa:e7:c3:7a:8f:
bd:2a:18:e5:f5:0a:f3:c8:e5:4c:48:a6:d6:90:79:
59:ee:44:d7:aa:cd:38:73:08:83:d0:63:e7:0d:f8:
15:d4:b9:94:1a:87:d0:31:91:ce:0d:5c:3d:8f:03:
8b:92:e2:be:ff:89:0d:ba:e0:69:fa:83:52:72:d1:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:D7:A6:EB:93:40:10:E8:66:B7:C0:27:74:17:A7:FA:21:81:61
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:ea:76:26:7f:e0:eb:46:6e:b1:8b:9d:23:23:7b:1e:e2:
84:94:a8:f9:b7:fd:e8:5f:1f:13:70:1f:a8:b2:15:57:11:4a:
fc:55:e1:3e:27:5e:35:20:5d:a0:03:60:b6:0d:f6:58:5e:46:
73:5e:51:ba:8c:41:97:02:bd:17:63:96:ef:93:ee:5d:c8:55:
48:df:1b:16:9c:26:60:bf:77:5b:f9:0d:a9:f9:7a:35:aa:4d:
d0:0f:b3:93:3e:18:4f:14:56:54:dd:34:13:0e:23:8f:11:6a:
32:73:3b:ae:8a:be:e0:41:aa:c4:02:8b:94:d2:cf:9f:56:b2:
ce:64:7d:d0:8a:c5:54:0e:99:fd:28:e4:c7:a3:a7:18:b1:a7:
c9:ae:34:cc:e1:d0:30:4e:2d:b3:27:54:f6:fe:c8:8c:31:31:
12:ec:13:5d:85:46:cd:f9:ad:26:74:1d:d5:3b:a5:8a:ba:72:
20:84:8b:da:79:bf:4d:e8:33:b1:07:ea:ef:b9:19:1f:4c:a9:
6c:9a:8f:94:e4:05:44:e5:ae:94:b4:dc:47:0c:9e:eb:30:e7:
3d:12:3a:ff:75:0f:7c:0a:4b:d7:20:f9:80:3d:44:33:dd:24:
ca:61:3a:5f:12:ff:09:d7:09:87:70:63:9b:91:bd:17:21:4f:
c8:e5:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:20 2025 by rpki-client