Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json)
Hash identifier: 6b289HJlMbms3v/YZcYJp7KX1Kf0GCgxVO7g+q8kHTY=
Subject key identifier: A7:A8:C0:C9:2B:79:29:AD:EC:45:F8:DD:81:02:30:19:A7:AC:AC:47
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 0197B7B37FE45000976E854DDC63F97960DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
Manifest number: 15C5
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=)
2: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=)
3: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=)
4: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: cDWi9qst1ulmKZEOJLHalQwy6L+gQN/jZ6Ub+a0ckE8=)
5: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=)
6: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=)
7: eGwOE8lbraIFP9l-UBBCUyjN8_w.roa (hash: E3bGB9caMn035nPuIHCWLooaKqDnHxrQ+ZG/yfDBfXc=)
8: obqfL4R2IKMApxxeeUPFE0sW9OQ.roa (hash: 7Ovq+/kB1PpmG+7SGcAWS7Jl70fuixev1vRb1jw0DXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7f:e4:50:00:97:6e:85:4d:dc:63:f9:79:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=a7a8c0c92b7929adec45f8dd81023019a7acac47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:ec:03:d0:08:c9:ed:f3:e9:f0:bf:bf:2d:
78:58:b8:ab:58:ac:d6:19:8b:69:0d:0e:f0:bb:e6:
ca:0d:4b:ce:32:c9:63:80:3d:81:a4:85:42:a6:d9:
38:38:82:a8:dc:df:df:57:5a:aa:b1:83:de:39:f4:
44:d4:fe:58:77:f2:1d:68:ff:d6:70:5d:43:7f:b3:
d1:f2:aa:7a:28:90:40:15:2e:ef:b0:09:6a:1e:84:
b9:77:fb:c7:54:96:88:9b:02:8e:b6:38:d8:16:d3:
f0:eb:15:8e:c6:cd:72:76:30:7a:80:e1:23:cd:f2:
0b:b2:47:72:34:1b:fd:38:b2:0b:a0:df:a7:47:06:
3b:c1:bd:d2:69:b2:84:f9:6e:92:73:b8:f5:89:ef:
74:40:7a:b7:96:3c:d1:30:7e:92:63:48:3c:c5:2d:
63:0d:49:ad:37:ae:3a:5e:d2:05:9e:d3:41:bc:b5:
80:72:7e:50:20:89:8c:a7:3f:ed:10:4b:cd:24:e0:
8c:8a:91:22:e3:33:e5:ac:98:9d:7b:67:18:cc:cc:
9c:ce:f1:2e:00:46:aa:a1:36:c9:94:d0:c7:be:72:
93:a0:c2:e9:eb:31:73:dc:1a:f1:5c:a3:e0:20:08:
4b:af:09:08:da:39:4f:0c:4e:9b:f3:c9:cf:31:44:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:C0:C9:2B:79:29:AD:EC:45:F8:DD:81:02:30:19:A7:AC:AC:47
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:5d:88:d4:e2:57:85:b0:db:d6:36:b7:6e:8f:a5:d9:93:
97:4a:3a:6f:48:90:87:b5:eb:48:1f:38:d1:92:be:dc:20:34:
0f:b2:90:09:42:36:ec:7b:f4:31:11:4d:f6:f0:60:c4:9b:5f:
66:fe:b4:73:bf:61:2d:db:01:09:3a:7a:6b:6b:11:a7:2f:6f:
4b:eb:16:98:22:d3:3b:58:5b:47:37:28:f5:d7:d5:08:85:51:
21:3f:e7:36:11:5f:13:6c:82:fa:9b:96:22:8d:4f:63:ca:f7:
19:a0:e6:ae:7d:bd:77:41:a1:9a:8c:12:b5:4a:52:3c:13:d7:
9a:51:32:bc:36:96:94:6f:53:ed:4b:22:23:1b:6c:ac:6e:a5:
9d:d9:37:e6:34:46:97:48:10:94:4f:65:01:53:01:f3:6c:df:
4a:fd:17:d5:b6:90:d4:6d:37:13:4f:a5:71:13:f7:d2:d3:66:
fc:78:f7:d7:1d:d8:e0:2a:9b:bd:b4:8c:38:b0:32:77:fb:66:
d5:21:dd:1a:d3:b6:32:c7:90:22:6e:49:33:43:db:25:1c:07:
7b:cf:43:03:ab:5a:d8:ef:db:47:2d:de:8d:82:1f:01:39:a5:
00:40:cf:4d:b2:b9:64:b4:d8:9a:fd:1b:08:36:ea:74:54:45:
27:f5:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:12 2025 by rpki-client