Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: 3zAa24IVa5nbef1NB4qFl4f152kDeZKWurtPkstOJlU=
Subject key identifier: D4:35:B5:BB:15:9C:7C:F3:5E:E2:2A:E5:51:4F:18:E8:08:C4:03:37
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 0197B6A17854F6D8CA6833DA6DD8008E3EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: f8xNXoAfwHfUJPLi73PTfyyetq4jGMx4vJiY4vw/+NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:78:54:f6:d8:ca:68:33:da:6d:d8:00:8e:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=d435b5bb159c7cf35ee22ae5514f18e808c40337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:58:4f:21:4a:ba:c7:f5:94:58:2e:57:1c:
03:82:ee:a7:16:0a:2a:9a:b2:1a:82:04:cd:91:10:
de:aa:0c:29:ee:ca:87:9a:cf:9f:e8:b4:da:11:83:
e1:3a:41:ba:e7:f2:89:2c:77:f3:65:1c:20:d8:bf:
8c:ef:38:92:5e:4c:74:d4:48:94:1f:25:2d:f9:34:
61:82:22:43:64:e3:d6:6a:29:9c:14:0a:bc:0b:78:
dc:f8:c7:58:45:1d:9d:53:f2:2f:0f:ce:61:57:48:
69:55:b6:db:55:de:61:2a:92:b3:87:10:8f:d6:76:
2c:fb:69:e6:af:29:86:af:43:85:12:34:03:07:d6:
c1:5d:fe:dd:16:56:24:bf:eb:e7:51:2f:8a:46:9a:
c6:d6:51:d5:e8:40:8a:1c:e1:80:55:8c:21:2d:82:
aa:2f:85:c0:a0:79:32:bd:95:34:fd:96:9a:12:d6:
47:78:2a:70:02:57:b1:d5:42:3a:e0:66:a1:a6:85:
b7:a0:8e:85:d8:4e:93:8b:43:59:5b:b9:4f:24:76:
fa:8d:a6:85:10:e2:39:79:6c:4d:3b:0a:19:e1:ee:
ab:63:70:a3:cf:4e:07:7e:39:8d:1a:19:e2:c5:21:
5a:ed:47:f4:ac:23:b0:a2:27:b5:be:5c:06:d5:fa:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:B5:BB:15:9C:7C:F3:5E:E2:2A:E5:51:4F:18:E8:08:C4:03:37
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fc:f9:45:f1:96:2a:51:92:91:38:c7:79:0c:12:24:60:37:
c9:14:2b:cc:07:a9:f9:ef:3a:60:f4:26:9d:ca:27:25:85:92:
da:cb:58:fc:ce:ca:f4:41:60:71:8b:29:2f:15:cf:8f:2e:2b:
68:d6:0f:a5:49:b5:d1:c5:b7:a8:43:55:08:1c:16:08:f4:3b:
15:09:e7:57:1d:93:60:67:25:ff:67:9b:09:4f:61:68:9d:60:
09:86:94:bb:e9:be:fe:fc:c2:4b:f1:87:33:df:e6:90:c7:1c:
5f:60:99:72:63:4e:f2:f2:a4:a7:ab:26:ce:ac:7e:7a:f3:cb:
ff:b8:45:4c:7e:26:c6:e0:17:e1:ac:1f:82:71:f2:e2:86:02:
b0:e6:57:e4:5f:27:6f:c0:63:68:56:23:03:5f:5f:47:cb:19:
03:3d:2a:cd:7a:25:92:d8:7d:ea:cc:e9:ec:da:6c:98:9f:b0:
9d:47:1e:bd:09:09:6c:81:ef:ed:83:5a:a0:7c:26:53:86:3a:
de:98:2c:47:e4:03:b3:2c:7a:17:70:39:b9:5d:31:25:b3:19:
a4:5c:fd:d0:28:ab:ae:ea:9f:c9:c2:2f:01:23:77:70:c6:9c:
88:d6:5f:3d:1f:1c:94:90:e6:d4:a4:0b:aa:88:63:04:d7:f4:
40:ce:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client