Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: KmZ4klPSZxCd5B1/TY0BfM8C/oiccuQe5BEHQ3CGLfc=
Subject key identifier: 2E:79:51:C8:92:34:27:24:DE:64:87:15:AB:FF:32:2C:ED:2F:89:F9
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 0197B632ABA8E7CDA68F42D5724BDAD2E18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 0644
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: TWrAYObQvVfLC6DRXxfuuoFGvhcfSW4+7qN6yvHagFc=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ab:a8:e7:cd:a6:8f:42:d5:72:4b:da:d2:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=2e7951c892342724de648715abff322ced2f89f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:0f:28:ba:64:08:f1:51:57:f8:04:8c:b3:
b9:39:d0:bc:fe:e2:91:0d:60:fe:95:8b:b2:35:7c:
29:55:db:f3:b4:b5:a2:d3:d5:fb:f7:11:f2:58:9d:
31:df:a7:55:d1:7d:5e:2a:b9:05:80:18:94:80:b4:
6d:d1:31:47:b7:20:2e:cd:7a:e4:a0:85:ca:f8:fe:
91:05:ab:ba:2d:53:1a:c3:09:8b:13:ec:b6:fe:08:
e9:44:5e:b4:5b:fb:ab:7c:41:bd:4b:21:c0:9d:bd:
fd:36:51:d1:49:53:07:63:9c:f8:55:b9:17:0e:25:
aa:51:8f:bf:95:fe:c5:b8:f7:00:89:72:40:3b:55:
7c:9d:7e:01:5e:6f:da:3b:04:0f:bb:46:29:cd:4a:
0e:aa:07:bb:ba:42:e3:97:d4:9c:71:da:81:4c:32:
5e:4f:26:73:45:02:3f:ae:af:73:3c:a7:ee:34:89:
04:55:f5:cf:54:bf:e5:d1:ae:97:ca:cb:b2:93:40:
00:1f:a7:32:49:f6:58:00:4a:72:7e:a2:6e:14:da:
19:e7:79:99:5c:b9:f0:1c:38:1a:60:06:2c:56:58:
97:f1:ea:96:83:92:4b:19:cd:92:c4:3c:38:bc:47:
98:5b:a2:79:92:19:e9:31:e5:a3:16:68:64:a0:7e:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:51:C8:92:34:27:24:DE:64:87:15:AB:FF:32:2C:ED:2F:89:F9
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:da:f4:6d:e6:a7:35:62:b3:3c:16:15:a1:93:20:5e:d6:0c:
05:eb:d6:f5:7e:29:84:83:4b:3f:52:df:d2:60:44:9e:2d:9a:
b3:c0:8e:ee:7d:ff:dd:53:56:3c:d4:97:9c:c3:31:b9:18:c0:
62:2f:25:c1:5c:01:05:ef:26:a6:fe:35:fd:aa:da:de:df:90:
9b:e6:26:9a:7f:7a:17:0c:74:5b:80:0b:f6:e6:c8:66:db:d2:
3e:89:d8:95:39:b0:92:da:f1:29:75:c4:60:ea:44:88:d8:c2:
a6:3b:3a:eb:49:5e:6f:f2:60:dd:49:3d:8d:75:bb:3a:69:42:
9b:3c:02:7f:eb:06:a2:3a:c6:1b:99:5a:93:2b:1e:3b:ca:23:
3c:8f:3d:f8:61:07:ee:6f:45:a5:b6:4a:c3:cf:ef:70:6c:0e:
e3:2e:08:23:c4:c1:9e:dc:28:a7:be:d9:7e:64:a5:c5:65:fc:
9a:54:69:70:2b:c6:f5:96:48:73:66:2b:79:87:79:ae:67:ab:
98:d5:d3:a4:a6:69:da:4f:25:d7:a4:29:7c:d8:3c:96:1e:85:
99:5b:04:bb:e7:af:9b:57:88:44:c0:2b:ed:d0:5d:62:25:97:
a4:3d:43:55:a6:f8:2e:ae:78:15:be:9f:9c:f5:31:ee:73:9f:
d3:e0:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:33 2025 by rpki-client