Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: ksBOdg8AGeXBME3tMDuPN1kdnKedLaKQtm02KlX08B8=
Subject key identifier: 35:AC:EE:92:8B:F7:DB:4E:45:00:76:4B:06:FB:46:F1:E1:27:7E:ED
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0197B820DAB00C5DCDC339AB674859211DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: OT1q2sskHy+Fz1QgqzUJ+tx9DaNF7S9csYJcQROmY3I=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:da:b0:0c:5d:cd:c3:39:ab:67:48:59:21:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=35acee928bf7db4e4500764b06fb46f1e1277eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:f1:58:b7:5f:e8:1d:88:c2:52:4b:3a:f7:
42:47:ff:4e:84:35:92:c2:7c:20:ad:d0:b9:d2:d9:
4e:ed:3e:d7:ec:04:7b:f3:e4:31:e0:ba:69:6d:00:
f2:22:46:41:ae:86:d2:f5:a9:3e:b5:41:6a:83:72:
fe:59:7f:91:f8:7a:40:6e:8c:d5:fd:b0:ac:22:0e:
9d:a4:4e:3f:44:0b:66:a2:cf:ca:14:93:a0:6e:63:
0f:59:aa:d7:aa:e9:c5:27:3f:4d:bd:03:1e:e7:ec:
0c:97:78:2a:9e:f5:c5:3d:89:c4:9a:cc:f5:40:17:
20:dd:79:5b:01:4d:46:a1:f7:78:b4:93:c8:b4:59:
2f:b6:d5:9d:bd:69:7d:93:18:e3:b5:d0:a4:ac:41:
ba:d6:51:c2:1e:c1:e1:5d:3e:5c:47:b5:f4:60:d2:
1f:f5:ca:db:c7:c0:db:d7:4d:3d:53:8b:dc:3c:18:
d2:67:98:96:d5:f3:69:80:02:10:19:28:20:7b:0c:
32:95:bd:60:4f:a2:34:c0:d6:c7:44:cf:6f:4e:df:
c0:4e:9c:ad:ff:b5:de:84:37:15:f8:da:4f:70:5d:
b8:99:0a:d6:22:b1:ad:5a:1d:11:2f:2d:95:70:0d:
b0:33:0e:e3:8c:b9:c7:7f:c1:47:66:96:94:f4:6f:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:EE:92:8B:F7:DB:4E:45:00:76:4B:06:FB:46:F1:E1:27:7E:ED
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:da:09:4a:22:0d:78:0b:a7:f3:1d:9f:a5:df:f4:a2:e8:
39:e4:b9:55:c1:4e:c1:75:c6:df:16:78:64:72:c2:d5:ed:35:
10:60:0d:ca:a3:97:30:7e:6e:31:0a:04:bc:69:f7:86:a1:36:
96:7b:69:3a:c2:17:20:86:f3:59:65:2c:28:98:a7:7c:6f:ae:
e7:11:03:2e:54:5f:5c:7a:f8:94:8f:f6:5b:78:f8:d6:3b:53:
04:97:17:bc:bc:24:6a:6c:e1:65:47:0e:f8:4a:3e:8b:44:95:
4c:46:e0:7d:da:8d:81:8a:da:bd:d1:04:0a:0a:5b:cd:02:7d:
2b:d9:6c:5b:55:f2:4a:15:7e:09:0a:27:e6:38:c4:43:b3:ef:
31:db:7a:2a:ec:62:b2:6b:6b:30:fa:4f:fb:b6:1d:5a:8a:48:
d3:cc:f7:c9:55:f5:45:e6:7e:82:70:38:88:dd:4c:37:8c:94:
fa:cf:a3:57:27:d9:c2:2b:3a:73:d9:74:12:ca:36:48:4e:8f:
5c:e4:cd:b4:a8:56:52:26:af:3c:21:f7:07:5c:a8:31:c0:a2:
52:a2:37:79:ed:fe:17:e0:ed:96:85:7c:21:99:7e:82:4e:d1:
dd:2a:5d:e5:c0:b6:26:ba:c2:e1:d5:11:7e:89:ab:47:4f:c3:
92:1f:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:37 2025 by rpki-client