Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: OzkwszF05KE2gsYGORBLiVT+jMVwEDkl3wGWEKUk/PM=
Subject key identifier: FD:86:28:16:BE:76:42:73:62:2D:98:90:A3:19:CE:A0:6E:9C:71:5D
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 0197B8904BF15404099D06F9A6D47932CD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0E73
Signing time: Sat 28 Jun 2025 22:02:33 +0000
Manifest this update: Sat 28 Jun 2025 22:02:33 +0000
Manifest next update: Sun 29 Jun 2025 22:02:33 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: OEap7KDbsGfbttPqjIybu8U7Pge2iEHGvZKsM7ziw78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:4b:f1:54:04:09:9d:06:f9:a6:d4:79:32:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Jun 28 22:02:33 2025 GMT
Not After : Jun 29 22:02:33 2025 GMT
Subject: CN=fd862816be764273622d9890a319cea06e9c715d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:5f:1e:a7:32:2f:c2:af:69:d3:91:18:e0:
42:ec:41:50:74:6e:fa:05:c3:32:62:19:ff:cc:9a:
46:2c:62:b2:5a:ee:11:c7:9c:90:83:94:5f:2f:58:
1a:3e:d3:46:0f:87:83:e5:24:93:92:aa:37:03:ab:
08:3f:b6:d0:1a:d4:03:fe:c9:7a:a0:c8:65:12:45:
80:f8:c5:07:f3:36:56:7c:c9:87:30:6b:47:f2:01:
60:1b:4f:35:97:7e:39:ad:89:9d:ba:2a:ea:18:3f:
22:16:69:e8:c0:8e:a3:62:d8:9e:f5:cf:71:23:04:
69:30:62:5c:a8:bf:77:c7:83:22:04:b8:23:42:fc:
d0:fb:6d:54:21:81:b0:2b:b7:96:1c:41:f1:87:27:
8b:4b:0e:fa:12:ae:b8:5b:b1:8a:61:a7:f4:d3:a0:
33:12:0f:5f:98:76:94:51:62:8e:54:ae:f5:5c:d9:
86:ad:0f:17:98:8c:03:69:4f:91:d4:36:b5:c0:1e:
cd:43:b1:1b:79:04:6c:ed:14:25:a1:32:8d:09:07:
5e:cc:d1:10:7c:a1:7e:2a:f2:83:f5:1c:c6:b9:c0:
c4:73:23:c1:ad:73:bd:9f:6f:1f:68:9d:6d:60:fc:
99:78:f0:66:aa:a5:c0:13:d0:07:05:00:ce:22:26:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:28:16:BE:76:42:73:62:2D:98:90:A3:19:CE:A0:6E:9C:71:5D
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:21:26:b9:20:fe:b7:e4:d8:f1:66:2b:0a:83:1b:68:93:
83:62:32:e4:ce:25:59:2d:85:38:25:ec:b6:89:dd:f4:f5:5d:
47:0b:51:c1:95:75:77:4e:73:84:ed:99:b7:57:14:86:2c:0f:
c7:64:80:3b:ea:e6:57:74:a1:1a:44:f9:05:01:b4:d9:f9:96:
10:5f:b6:df:2e:63:6e:27:1f:cf:d9:8e:d1:1e:d0:a1:05:2a:
51:30:80:37:cb:03:11:74:e4:b2:e0:81:e5:eb:15:e5:7d:15:
44:5f:41:4e:ef:ec:96:1e:7f:da:f6:5d:4d:bd:2b:e3:49:97:
c8:af:46:19:9c:3a:e6:72:02:e1:39:c3:cd:6e:a5:d6:7a:ee:
ca:8b:51:1e:18:cc:a8:96:11:da:f7:72:d1:00:e1:89:88:bb:
24:4d:2a:54:9f:90:ae:53:78:13:43:7b:b2:49:54:91:64:a3:
97:6f:e8:c5:c9:2d:ea:4e:b4:28:26:6a:d5:65:64:c0:7b:4e:
7f:02:c4:30:c6:7f:35:f6:53:5e:0f:79:84:7c:f7:b8:99:05:
a3:3b:6b:b6:1c:da:88:f9:aa:f2:84:9e:cb:02:25:d9:29:56:
36:63:45:fd:b3:2f:95:55:0e:be:ed:0d:c7:4c:d6:c5:63:d7:
cf:67:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:18 2025 by rpki-client