Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: iZYzQ1JcgXIEw7o27FL1X2p8PJBHQaphzDX4HVFY0sU=
Subject key identifier: 76:28:69:DE:52:F6:64:88:BD:52:A9:B8:E8:B0:98:A8:9B:3C:AA:D6
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 0197B77C7757734B17B097A169A3AFE69001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1295
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: WejA7gTCeTyIH7TKrXgw9noIU3uz2pP6pmcwplfxp5M=)
2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:77:57:73:4b:17:b0:97:a1:69:a3:af:e6:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=762869de52f66488bd52a9b8e8b098a89b3caad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:d6:32:ef:55:67:a8:79:61:54:86:2b:94:
b2:af:09:94:13:aa:02:bc:1c:bf:54:d6:4f:4c:54:
2b:76:c1:5c:8c:5b:6f:e0:fa:49:0f:76:db:0b:fc:
24:b2:25:e1:69:55:1a:8a:2b:0a:e9:c4:17:50:2c:
4d:35:e3:d8:01:09:64:43:36:a3:d1:65:c4:db:ed:
4b:c8:7b:75:b7:f8:31:31:ea:cc:40:43:ee:f5:e5:
cf:88:21:80:e6:c9:ab:6b:d6:b2:d9:19:e2:3c:23:
b4:01:cf:82:48:76:0b:64:a4:29:4a:f5:76:9b:3f:
cc:54:44:4c:90:7a:3b:f2:fb:c8:c2:cc:46:7e:74:
b8:31:5c:47:89:73:30:e9:7d:f4:79:be:be:e8:a1:
35:b1:75:4e:a9:4b:73:a0:a4:3e:f7:4c:37:cd:e2:
da:47:38:c4:96:5f:cf:c9:1e:17:04:5c:02:9e:20:
69:09:57:be:ec:4c:16:57:7d:c7:6c:14:51:be:d4:
da:3b:8c:df:8d:3a:28:d2:ca:0a:8b:e8:d4:db:1b:
d9:63:ea:cf:b4:48:db:76:1f:27:1a:e6:eb:6a:35:
2b:2b:f1:23:06:52:d6:50:1a:87:90:6a:a8:39:e1:
09:a8:01:7d:b6:7e:3f:be:da:20:76:54:90:7f:2f:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:69:DE:52:F6:64:88:BD:52:A9:B8:E8:B0:98:A8:9B:3C:AA:D6
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b9:1f:10:dc:2c:54:4f:6c:b7:f3:12:1d:b5:68:3c:84:32:
ec:3b:9e:05:59:3b:bf:a7:14:a4:67:cd:e0:6c:8f:7e:b6:9e:
f7:32:72:69:1a:28:fd:b8:a1:2a:ba:32:3e:69:6d:1a:c2:7b:
fa:ed:fb:3f:41:e4:48:f8:18:71:ef:41:d1:58:c6:81:d5:1a:
a7:23:6c:3b:41:2b:4c:40:4f:20:09:22:da:e5:ae:da:d2:67:
c4:b2:aa:f7:4a:f5:4b:df:a9:bb:d9:06:3d:7f:53:8b:60:2d:
18:9d:6c:94:58:58:c8:58:b6:bb:65:74:1c:78:c0:b9:b2:a8:
c9:20:57:2f:2d:af:2a:bf:81:28:8a:f2:1b:7a:98:8f:26:50:
d8:79:05:9b:0c:9b:ad:77:93:95:24:86:03:67:9d:ef:a5:7c:
67:c2:76:88:85:ba:58:3e:9f:d1:e7:55:51:38:94:38:22:30:
a8:73:4b:70:7f:a5:49:45:83:fb:f1:59:01:9f:25:a6:6b:8a:
f7:ec:0e:0f:cc:b2:ab:91:e9:1c:ab:12:28:c5:7c:22:04:43:
e4:4a:7a:4c:2c:22:f7:28:aa:c3:5b:fe:b5:95:53:62:85:89:
48:c3:a9:2d:2d:78:0b:51:14:ab:d0:d8:47:2e:9e:8e:b2:10:
69:e6:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:45 2025 by rpki-client