Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: 0glcrUUCXH81DVOpREMV4AhZWLmv6+86z4RPDJiN1u4=
Subject key identifier: DE:68:DF:0C:E2:38:C1:59:8A:71:FA:06:6A:31:47:BC:0D:51:34:70
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0197B70E8B50DD44793DA781C9E6DF836338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: bTyxYrOLJScRwxgLIpv4MQt4JteG7G/MyKh/Mxb3P3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8b:50:dd:44:79:3d:a7:81:c9:e6:df:83:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=de68df0ce238c1598a71fa066a3147bc0d513470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:c7:8d:7a:b2:4c:d5:36:3f:b6:1c:2c:13:
d0:18:ee:17:f8:cd:4d:03:67:1d:33:79:2d:c9:b6:
fe:4a:77:fe:48:12:7b:13:4d:28:ab:93:bf:7f:14:
2b:10:a5:64:bd:ca:13:1a:63:5b:0b:ad:89:20:92:
a2:9d:99:07:db:27:1a:5a:33:76:b4:c5:cd:d6:16:
5e:de:b1:fb:cc:05:2a:14:58:c0:e8:4f:27:8a:13:
1c:95:07:6f:4a:17:36:15:9b:f9:90:8b:c5:66:b6:
11:d2:5b:de:5e:23:14:92:05:27:a3:e8:98:3c:77:
37:2f:c6:39:b6:82:78:a3:62:3f:d0:6d:9d:67:7b:
3c:5c:47:8e:4b:42:a0:be:80:7a:24:06:dc:72:5c:
5d:c8:e5:c3:95:26:47:6c:d5:2b:14:51:37:f0:23:
bb:16:a8:d6:ab:28:f6:0f:90:e1:47:f4:98:54:96:
de:79:2a:cb:8c:53:c9:76:67:5e:8e:bd:93:8c:ae:
de:26:48:be:ee:b8:d3:1a:04:c8:ea:f1:4a:ce:b6:
8e:04:60:53:3d:6e:c8:f1:56:0c:77:81:7a:68:46:
b5:4c:35:41:0e:51:91:b3:a2:11:66:0a:3b:10:75:
4d:fc:66:20:32:c5:a6:9a:cc:41:c9:33:d9:e6:8f:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:DF:0C:E2:38:C1:59:8A:71:FA:06:6A:31:47:BC:0D:51:34:70
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4b:ab:fa:70:24:93:6c:6c:af:bc:80:10:3c:a4:f3:25:0c:
f1:f1:e6:ee:33:af:9f:93:cf:97:80:da:b2:28:f5:aa:ab:39:
35:38:0e:a5:9c:02:04:73:e3:49:f0:f7:6c:d0:61:61:27:84:
36:9b:aa:ab:89:0a:a9:a7:c8:1f:69:28:f7:a2:2c:81:09:8e:
c1:27:10:d8:2e:de:d4:f9:56:48:2f:7e:5a:93:8c:a2:7b:b6:
9d:60:f7:7b:b9:12:12:ad:5d:98:b1:a0:28:43:ef:0b:e0:5b:
ba:3e:6e:9b:60:4e:96:ff:5f:e6:0c:86:3f:b9:a5:3e:94:ae:
a5:c6:95:19:65:3b:a2:e0:ee:ae:6f:da:8c:9b:f7:aa:5a:9a:
6d:0c:e7:85:db:eb:e3:07:a4:49:68:7e:37:ac:36:21:2e:84:
da:58:0b:f7:92:b4:a0:9a:2b:ea:c0:09:68:b8:f3:74:9a:21:
8e:65:aa:09:92:06:39:20:96:da:fa:56:3c:2a:37:48:8e:03:
4c:2e:fa:7f:3a:b2:5c:8e:e4:79:7b:1c:18:ff:69:40:53:fd:
6a:27:f7:86:4a:e3:94:d2:84:fb:72:96:74:02:e4:a7:b5:0c:
d6:15:d5:8c:73:d9:23:ae:27:bb:fa:af:94:ef:5f:8f:31:f9:
c4:f5:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client