Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: 5jF+cd9Ug/+AWaasAZ5aaHnFk8lpS4ZWTTk7J+OVkQk=
Subject key identifier: FC:E6:89:2C:F2:4C:0D:49:AC:7C:E2:69:89:54:8E:C9:94:35:2C:58
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0197CEA91F7248D97E6667622D1D1B689118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0D21
Signing time: Thu 03 Jul 2025 05:01:19 +0000
Manifest this update: Thu 03 Jul 2025 05:01:19 +0000
Manifest next update: Fri 04 Jul 2025 05:01:19 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: ZD1XGKJbusZ+drj2SZZwvbJ7EuvcQuV6wDJGq+s1kLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:1f:72:48:d9:7e:66:67:62:2d:1d:1b:68:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jul 3 05:01:19 2025 GMT
Not After : Jul 4 05:01:19 2025 GMT
Subject: CN=fce6892cf24c0d49ac7ce26989548ec994352c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:ee:96:c0:bf:40:17:2a:3f:30:af:9c:98:
8e:5e:29:7a:51:30:fb:86:e3:51:92:70:fc:af:b2:
f7:5c:bb:d1:0d:ce:f6:f9:be:59:84:8b:b9:af:0f:
c1:44:31:06:1e:59:32:fb:97:41:d2:38:70:e8:51:
2c:b1:9a:4d:20:52:fb:8b:ca:9e:fc:04:09:c9:4e:
3e:90:d0:16:bc:15:29:cb:c8:95:bc:53:d3:3a:5f:
80:14:7c:64:67:bc:5f:0a:3d:6a:ba:4d:d1:c4:8a:
32:79:88:f7:01:8a:47:9f:a7:38:a5:02:95:5c:2d:
bf:cd:4e:9b:31:a0:35:79:c9:fe:b2:d4:ad:ad:3f:
ea:e6:d5:99:74:d3:38:2e:fa:19:5f:ee:ac:75:2c:
d6:14:c7:ac:0b:8c:1f:80:d3:52:74:f8:9e:38:db:
8f:46:5c:49:64:1f:9f:aa:e2:ce:f7:41:16:be:7a:
97:44:a2:1f:7c:f8:40:cc:fa:62:3a:f4:50:a6:ff:
0e:bf:76:07:4c:6e:19:76:f2:06:17:1f:97:81:e4:
e2:25:4d:72:3e:eb:be:e2:7e:2d:b2:fb:5d:7c:8e:
3e:d6:3c:40:c9:1b:9c:67:dd:7e:a7:94:bd:a1:57:
7d:51:2e:3b:29:35:a6:9e:a1:f2:b9:88:1e:23:3e:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E6:89:2C:F2:4C:0D:49:AC:7C:E2:69:89:54:8E:C9:94:35:2C:58
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:9f:c2:e1:41:fb:93:06:f5:24:49:69:24:ea:f9:72:ce:
61:cc:38:56:58:bb:7a:32:52:12:2a:6c:96:1e:3e:a1:91:75:
ad:97:54:4e:d5:05:55:13:14:74:a8:f0:2d:99:35:fe:78:1a:
e5:cc:67:b2:09:e2:2a:74:ba:6e:9e:78:8b:0a:f4:97:a0:b6:
66:c8:19:05:68:db:44:c7:fc:4b:ca:88:9f:07:ae:fc:30:c4:
7c:a7:54:98:dc:c2:42:e9:38:4b:2f:c3:b1:5e:c6:ff:3e:14:
43:9e:c6:37:31:f4:dc:25:17:45:b4:04:45:20:a6:79:91:ab:
f9:79:b2:7c:be:16:ea:a9:05:b8:ce:7b:47:d9:7d:0b:9c:51:
b9:82:7c:d5:78:73:95:95:4b:c9:81:ce:1a:20:56:78:45:49:
e1:8d:f9:7f:34:cc:da:6b:d9:db:40:4e:8d:ed:21:d9:73:5d:
61:73:52:9f:c2:7c:f2:de:3a:42:be:de:c4:f4:01:52:4a:77:
1c:30:15:c4:ba:3e:3f:4d:cd:89:0b:0e:09:c5:2a:73:68:57:
1c:8e:33:24:7f:2f:df:2e:7c:31:46:c0:be:2b:b6:ef:e8:fd:
73:b0:a7:c0:5e:09:45:73:e9:2d:de:30:5c:97:0b:09:5a:4e:
86:f9:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:14:37 2025 by rpki-client