Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: b11xnUVjxFzhihCjljrGDxgho+dm6xMyqAj2O7aynlM=
Subject key identifier: 18:1A:99:91:3D:BD:FE:C7:5E:51:72:89:4F:08:80:A9:3B:D1:03:A8
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 0197BA7DA12CCD9C22100BF24E32BB38ECC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 07:01:24 +0000
Manifest this update: Sun 29 Jun 2025 07:01:24 +0000
Manifest next update: Mon 30 Jun 2025 07:01:24 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: nl1m9zFoH9gHigOKK3p0nKtWUZh0qp7j+q2elDia1Gw=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:a1:2c:cd:9c:22:10:0b:f2:4e:32:bb:38:ec:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jun 29 07:01:24 2025 GMT
Not After : Jun 30 07:01:24 2025 GMT
Subject: CN=181a99913dbdfec75e5172894f0880a93bd103a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:a9:7b:22:f7:86:32:bb:a6:95:69:d0:44:
18:d4:5e:6c:e6:07:b0:d2:34:4e:6d:11:4b:e6:dd:
e2:63:6a:de:a4:66:71:0b:bb:26:a7:58:7f:55:d4:
73:db:49:80:62:9a:c2:80:f8:f2:02:07:f2:9d:1e:
2c:1b:4b:d5:62:a5:5a:2f:c0:3b:a3:d2:c6:7c:9e:
45:58:5d:a9:06:f8:4a:07:90:0b:b1:be:b4:39:79:
db:cc:dd:f8:e1:f2:21:e4:95:39:2b:39:84:bb:e2:
c5:d2:3c:27:f3:4c:85:15:51:9b:99:b0:b7:f7:76:
07:32:a1:24:74:ea:c4:f9:27:1c:bc:f4:05:8f:d8:
3e:ed:96:15:ec:b8:05:0f:37:84:8b:45:91:ad:51:
a5:43:eb:8a:ce:74:c4:f1:a0:33:0d:98:5f:6b:5b:
a4:57:31:a6:58:db:0f:ec:55:7a:b0:20:a0:de:a5:
dd:10:4e:cd:70:18:3e:63:7d:4f:af:f2:b8:ac:6d:
23:60:9f:03:b7:5a:9b:bc:7e:31:00:44:6a:dc:77:
95:0a:e5:4c:1b:1c:3c:33:94:f2:33:19:cd:3e:81:
26:0d:79:2e:f2:c0:7b:75:64:b9:24:d5:71:50:eb:
97:9f:6d:17:8d:e4:e1:e6:cb:ad:ed:88:bc:02:1d:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:99:91:3D:BD:FE:C7:5E:51:72:89:4F:08:80:A9:3B:D1:03:A8
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:32:24:6f:0c:9e:dd:c2:10:1a:05:43:6b:c5:37:a3:36:63:
1a:0a:cd:53:d5:d3:3e:db:fd:06:7f:d6:ac:c3:63:6b:ab:49:
e4:5e:d5:8e:0b:96:fb:e3:87:76:9c:96:4c:7f:c3:fe:95:b3:
b3:77:68:e9:e1:dc:7f:5c:b5:dd:59:61:89:da:04:e0:a4:23:
bb:d5:03:a6:41:92:1d:6b:29:72:ba:af:9b:1c:10:11:78:34:
0a:bd:3a:a5:09:fe:fe:9a:a2:80:b2:6b:43:a5:38:ff:1f:03:
3d:45:31:06:a8:63:6e:47:07:fe:40:19:a1:79:72:96:63:18:
d9:7e:c7:dd:8f:2d:09:77:a7:11:c9:ac:c2:71:ed:43:b9:32:
5d:62:43:ea:65:77:7b:d7:a8:05:02:72:47:ed:61:0d:81:2a:
80:d0:4d:9a:e6:b9:5b:2e:70:7b:2b:80:05:6d:b0:e3:b7:b8:
28:6a:c6:58:a0:2a:13:a8:bf:1b:cd:0d:71:80:31:e6:a1:e3:
1a:d6:d0:c6:86:b6:0e:8e:6b:c9:df:5b:07:a5:4f:18:59:2f:
2e:85:c4:5f:ba:b4:1c:f6:5b:5c:68:27:16:4d:1f:ff:a0:1f:
0d:8e:29:4c:79:4c:f3:62:5e:a0:a9:c6:fc:5f:34:74:8a:f0:
54:a0:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:14:54 2025 by rpki-client