Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: FwDqM8L+BIr1thL7fCKkShgfdp5FwLkd5En13rXaM5I=
Subject key identifier: FF:C1:7D:F0:9D:2F:01:E2:73:D6:25:10:8A:0C:DB:9B:DE:13:53:1B
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0197B6A210A4A17028D536ADEFED839AEC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: QO2fA8hHM9Mp9ZONGSJPmzoqFgnd18pYJP8rXbGZP8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:10:a4:a1:70:28:d5:36:ad:ef:ed:83:9a:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=ffc17df09d2f01e273d625108a0cdb9bde13531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:04:58:a5:af:1b:74:05:6f:e4:5f:11:76:
02:1d:48:a0:8e:a3:0e:9c:ac:c9:31:8d:fe:8e:25:
98:64:4b:96:19:36:9a:7b:48:a9:d6:6b:47:1f:de:
53:34:be:3b:37:aa:89:e1:31:b3:f4:76:fb:0f:79:
49:cf:44:8b:9f:03:11:8e:8b:94:e2:21:d7:8f:9b:
9d:a2:3d:1f:4f:f1:8a:57:d4:06:2a:9b:e6:f8:ef:
56:49:1d:ae:02:37:14:da:22:bc:a7:3f:07:2a:0b:
84:5e:b4:2e:2d:b5:0e:35:c4:88:fd:c8:16:e3:a6:
93:ea:76:c7:01:4c:5e:5f:33:0f:4f:4b:21:b5:fc:
98:48:2c:e9:92:1c:02:94:e6:47:74:89:ab:9a:06:
e5:80:8f:ab:fc:f6:a8:e2:2f:7e:af:be:73:ef:be:
8e:fe:08:b3:45:21:59:cc:7b:61:87:c1:52:b5:7c:
62:86:82:78:23:cc:ec:89:19:e0:a9:cf:b8:2f:37:
b9:2d:3e:e4:b1:90:ca:32:d0:80:e4:e0:5a:51:30:
9b:83:c4:e5:35:0a:d7:da:17:0a:79:e1:df:b7:2a:
84:25:98:8b:8d:0a:53:3b:05:e6:37:e1:74:6d:ea:
7d:88:cb:11:c5:76:78:38:ea:e6:06:e8:ea:1b:ee:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:7D:F0:9D:2F:01:E2:73:D6:25:10:8A:0C:DB:9B:DE:13:53:1B
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a3:cc:c7:db:3d:47:5f:d2:61:08:b6:96:36:da:2e:eb:4d:
1f:b2:79:3f:b1:b4:5b:79:ed:1f:27:3c:72:39:a1:22:d7:5f:
0b:90:fc:83:34:24:24:16:21:da:cc:ef:c8:34:58:3d:59:8b:
31:57:91:35:ef:e8:af:1d:e8:b6:00:be:10:f7:31:42:d9:76:
08:90:d8:52:ef:e3:96:8f:dd:20:96:3c:ab:35:30:4f:38:67:
c1:0c:73:12:12:a7:b0:b6:44:58:31:3e:70:75:11:77:65:20:
67:87:e8:ce:5b:4e:25:c7:4a:bd:b3:45:ec:ff:0c:50:0e:e5:
03:bf:7b:38:e9:a4:94:1f:36:bc:07:78:e4:8e:fe:5d:27:39:
d5:01:16:54:5a:09:06:ab:3d:be:76:2b:c2:2c:30:db:6a:d4:
0f:fb:6e:83:d0:1c:9d:6a:72:e3:bb:cc:10:1c:a4:04:2d:41:
45:86:62:a3:30:f7:7e:e3:75:f8:bc:06:53:c7:b4:b3:63:59:
29:d5:a0:79:eb:30:ce:75:54:fc:e5:af:5c:ee:67:dc:08:c6:
27:9c:a7:f2:ee:64:75:9d:cc:b5:49:52:fc:fb:8c:ef:18:79:
5c:39:0e:6b:ec:aa:5e:a7:b1:63:c5:ba:df:a9:b4:b7:5a:7c:
66:a9:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:36 2025 by rpki-client