Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: IYa5cvvWAPYgWN1qhmgZ15SVdWElZsDOCY8tWue0jHU=
Subject key identifier: A3:60:B8:D9:B7:DC:94:EB:2B:66:83:E2:09:6D:1C:43:8A:50:78:FC
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 0197B6A1CB998BD68CA992E529231C6AF70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 050D
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: OaApdB8zzxY+BFuwf8h58USHH6wWri9aQkalCbitwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cb:99:8b:d6:8c:a9:92:e5:29:23:1c:6a:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=a360b8d9b7dc94eb2b6683e2096d1c438a5078fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:4e:b0:70:d5:e1:43:c9:14:51:76:3c:2e:
b5:a7:5b:b0:2c:1b:9d:c7:2a:3c:5b:81:cf:bc:74:
7d:6f:cc:61:05:94:82:fe:cb:0c:0b:e9:3d:aa:09:
55:c1:c1:aa:e6:07:34:cc:a1:5d:c4:25:c2:4d:30:
97:0e:ad:70:e2:ae:14:de:c5:c6:00:88:d3:61:ba:
4f:f0:14:c6:25:01:40:8b:2c:01:a0:f4:96:1c:67:
bf:59:ea:29:75:58:b8:2c:57:31:ec:f9:88:a5:ba:
e8:4f:28:a4:a9:94:e0:14:52:00:fc:17:dc:7b:d6:
17:30:e6:d0:f5:1c:a8:e3:e1:fc:fc:69:c2:37:c9:
a7:8f:e2:da:53:85:1f:7f:55:ea:12:00:14:d4:22:
77:90:f3:a5:9b:99:f9:cb:66:0c:fb:94:60:4e:9d:
bf:94:62:74:5a:8e:da:f1:ea:4d:11:d3:e1:f1:69:
aa:6e:84:1b:21:db:d1:34:c6:25:9a:70:21:77:20:
d8:a9:7d:eb:2a:cf:b0:dc:b8:46:b6:cd:eb:0f:1a:
ae:21:05:23:72:4e:a3:33:d9:6a:cc:f5:b0:75:65:
8f:b0:eb:68:88:82:45:4f:d2:76:9a:0d:6f:3c:61:
59:87:1f:59:8d:5a:bf:ca:38:bc:e2:74:8f:e3:2c:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:B8:D9:B7:DC:94:EB:2B:66:83:E2:09:6D:1C:43:8A:50:78:FC
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:44:b8:ee:ca:f0:d1:a9:66:75:04:a4:84:90:ad:a9:58:0f:
ed:57:8c:4c:21:8f:74:57:56:7c:10:15:cd:82:c5:72:b3:57:
91:78:67:1b:d6:f2:b7:9f:86:16:12:25:e3:49:7f:ee:16:42:
18:a8:82:cc:f9:f2:04:d7:e2:e9:ed:c4:57:4e:8d:a9:34:d9:
95:0d:74:b2:0e:65:1f:ee:5b:dc:88:72:b1:4f:4e:0d:3a:9d:
07:5a:db:51:bb:bf:25:7f:6f:d8:6b:d8:0c:4a:ce:d7:83:ee:
63:21:4d:b4:27:83:90:41:a1:0c:53:68:9b:c2:9e:84:23:54:
cd:0e:3d:8c:44:7e:93:d7:c2:7b:c5:bb:1d:9e:e2:fb:b4:96:
92:44:1a:26:e1:be:fa:ab:df:22:af:7b:e1:1d:b7:80:30:7c:
56:a8:a0:a1:31:9e:00:92:9f:cc:d2:11:ab:0e:b2:8a:09:d4:
99:15:ed:29:62:be:58:c7:9d:47:1f:92:4c:eb:10:03:f5:7a:
ff:2c:5e:61:28:e1:09:ea:ca:25:0f:47:2a:07:bd:e2:a1:ff:
e3:ea:a1:ab:d6:2f:b9:bb:e1:66:05:48:5b:c1:67:da:8e:6b:
0e:ec:5f:09:86:e9:a2:d7:31:b8:5a:d2:40:49:fb:bf:bf:af:
b0:3e:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:54 2025 by rpki-client