Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: knxsX7cTESPBLp4IHV1OXFcETvbooOevqvsyOVkuxyE=
Subject key identifier: AD:1B:15:DA:4D:25:0C:1B:70:49:FC:98:0D:C1:3A:F6:9C:67:2B:78
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 0197B6D750F52F422C561C34322F4392EEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0BE0
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: nP25vnsWjWyPy8hUcm/zCnoA3NmWNbjA9XoJ0sNj32Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:50:f5:2f:42:2c:56:1c:34:32:2f:43:92:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=ad1b15da4d250c1b7049fc980dc13af69c672b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:4a:9c:b1:94:d6:f7:36:16:17:32:54:80:
49:34:ac:f0:e0:1d:1d:ff:3d:c5:97:09:2c:11:01:
37:53:86:ae:5a:97:28:d6:35:f7:70:79:a8:9d:a5:
dc:c5:67:49:61:34:7a:38:1e:2e:51:46:92:c1:dd:
b4:bd:88:53:51:70:30:b6:53:a9:85:48:ea:11:a5:
5b:ea:46:70:37:69:4b:8a:38:b6:78:e3:7f:4c:5e:
9c:91:76:72:29:19:10:1e:bc:5c:98:d7:f9:e5:2f:
31:74:22:20:e5:48:1d:b1:ac:1f:84:03:87:81:38:
27:a0:8e:10:55:b6:ef:29:7b:39:e0:14:c3:a4:61:
a2:d9:7d:7d:cd:53:70:40:5c:ac:4f:59:20:d1:eb:
21:b8:c1:0d:ba:6d:68:74:3f:9e:3e:5e:6f:6f:8e:
9f:03:70:74:d0:82:a7:62:9b:e5:f3:da:a7:e6:24:
1c:4a:ab:bb:b2:73:da:e2:6f:aa:72:34:64:29:52:
5c:78:13:3f:7d:02:c5:89:67:cd:8d:fd:1a:60:1e:
49:53:a1:60:51:91:91:8b:df:b2:f1:9b:90:c7:be:
54:44:95:c4:e4:55:d5:54:9e:44:2c:9f:a9:2f:89:
5c:44:0d:2b:94:68:df:12:37:f3:56:c2:7a:e0:18:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:15:DA:4D:25:0C:1B:70:49:FC:98:0D:C1:3A:F6:9C:67:2B:78
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:67:a1:6a:23:33:04:54:92:4c:75:c6:16:a9:db:62:51:28:
9c:00:9b:fa:3f:bd:65:eb:da:28:8c:11:6a:f3:b8:a0:f9:7b:
7b:c8:6a:7e:db:0a:f4:32:4e:fb:fc:4c:1a:40:83:2f:c4:01:
db:68:fc:2f:4a:a3:bf:72:ea:8b:85:62:76:55:b2:10:cc:8f:
b9:4d:9a:73:30:13:e9:5d:15:ce:e5:38:7a:6c:3f:28:a0:60:
dd:dc:87:94:1e:5b:68:d8:12:7f:c5:88:cf:71:cb:ca:ee:de:
55:bc:ff:d6:e2:72:e2:ca:f8:cc:42:6c:92:67:84:ed:f6:c3:
57:f1:e5:e5:48:69:b7:d4:4f:ce:9c:1a:6e:b9:b2:80:b7:d6:
5c:d6:2a:b0:ef:57:ae:ed:33:f9:44:d4:54:cd:fc:d4:e0:79:
3a:7e:e5:af:f5:6c:f4:58:3a:9d:43:18:b3:e8:b8:6d:52:ef:
16:dd:39:fc:f3:05:1e:f8:44:13:06:ba:14:d2:f2:04:50:85:
39:31:88:3f:bf:e4:18:ba:1c:d1:77:41:0a:6a:d2:30:e4:32:
ee:49:e1:2f:23:99:1b:55:57:61:b4:4b:c3:af:2d:59:89:28:
c3:9d:8d:26:17:9e:fc:5a:f4:af:c3:6b:34:eb:ec:82:ed:78:
85:b9:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:23 2025 by rpki-client